Tucows or LinderSoft - Which is Recommeded for buying Code Signing Certificate?

Started by certforumz, November 25, 2015, 05:19:40 AM

Previous topic - Next topic

certforumz

LinderSoft appears to be very helpful in going about buying, and using code signing certificate/

A few useful links:
This is where you can place the order on Linder Soft for Code Signing certificate:
http://www.lindersoft.com/order_codesigning.htm

Here you can all details as to what needs to be done before AND after you buy Code Signing certificate from COMODO:

Forum:
http://www.lindersoft.com/forums/showthread.php?23099

Here is a step by step walk through for using your just purchased Code Sign certificate:
http://www.lindersoft.com/CodeSign.pdf
http://www.lindersoft.com/forums/showthread.php?23099

If you dont want to use LinderSoft proprietary SetUpBuilder, check out the following resources:

https://www.digicert.com/code-signing/signcode-signtool-command-line.htm

DigiCert:

For signing drivers, you need Kernal Mode Code Signing. Check this out:

https://www.digicert.com/code-signing/signcode-signtool-command-line.htm

https://www.digicert.com/code-signing/driver-signing-in-windows-using-signtool.htm

tucows:
https://author.tucows.com/ - You need to sign up as author (free sign up)

You may be interested in reading the following:
http://successfulsoftware.net/2008/02/27/the-great-digital-certificate-ripoff/

Step by step method of setting up:

http://www.davidegrayson.com/signing/

By Mocrosoft:
https://msdn.microsoft.com/en-us/library/ms537361%28v=vs.85%29.aspx

Also check COMODO forum thread on code signing:

https://forums.comodo.com/code-signing-certificate-b17.0/

certforumz

This is all what you need to do to start signing an executable:

https://forums.comodo.com/code-signing-certificate/i-have-collected-my-code-signing-certificate-but-where-is-my-private-key-t104592.0.html

I ordered Comodo code signing certificate for Microsoft Authenticode signing.

I received the email to say my code signing certificate is ready and I clicked on the link which entered a collection code.  The certificate installed into my web browser and I see it as a certificate (also in certmgr.msc).  The certificate says "You have a private key that corresponds to this certificate."  But how do I find my private key?  I don't remember doing anything relating to a private key?

Is the private key stored in the certificate?  Is there any way I can extract it?

Angus


I worked it out.

This is what you need to do after downloading your certificate:

You need to view the certificate that you downloaded.  There are a number of ways of viewing, possibly the simplest to explain on windows is Start... run... certmgr.msc

In section Personal, Certificates you should see the certificate - for mine the name of it was my full company name.

Open the certificate, select Details tab and click on Copy to File... button.

The Certificate Export Wizard now appears.  Click Next and select Personal Information Exchange - PKCS #12 (.PFX), click Next.

The pfx file contains your certificate and both public and private keys (Note this means you should be careful to protect this file).

You are now prompted to enter a password to protect your private key.  Enter something suitable and strong ideally (just in case someone gets hold of your pfx file) and click Next.


Then browse to where you want to save your file and give it a name.

That's it, the pfx file is all you need to start signing.

I use a batch file to sign like this:

"C:\Program Files\Microsoft Platform SDK\Bin\signtool.exe" sign /f mycompany.pfx /p <mypassword> /d "Win Ball Test" /du "http://www.mydomain.com" /v /t http://timestamp.comodoca.com/authenticode winball.exe

certforumz

Must Read
Very Useful link:
Requirements and How-to when ordering (Code Signing Certificate) via tucows:

http://www.tech-pro.net/buy-code-signing-certificate.html

https://www.dougv.com/2008/09/my-experience-getting-a-code-signing-certificate-from-comodo/

Once the certificate is installed in IE, use the info provided in the following link to export or back it up:

http://www.tech-pro.net/export-to-pfx.html

Note: It is preferred to use IE instead of Firefox. If you use firefox, you will need to export the certificate to IE.

Also, checkout the techpro free code sign tool:
http://www.tech-pro.net/codesign.html


certforumz