3 ms·
Our EV cert shows an alert. Very fucking annoyed if I’m honest. And yes it was SHA-256. Several days and a pile of cash fucking around with WIX and signtool fo
by setquk 8y ago
Our EV cert shows an alert. Very fucking annoyed if I’m honest. And yes it was SHA-256.
Several days and a pile of cash fucking around with WIX and signtool for what exactly?
- mnkypete 8y agoCheck this Stack overflow thread. For us it was cached SHA1 certificates in the cert chain: https://security.stackexchange.com/questions/109629/deprecation-of-sha1-code-signing-certificates-on-windows/113114#113114 https://security.stackexchange.com/questions/109629/deprecat... But yeah, it's a pain..
- setquk 8y agoThanks for the link. I don't think it was that but I'm going to check it thoroughly anyway.
- jenscow 8y agoThanks! I was considering an EV, but will now opt for the poor option. It's essentially a protection racket with price segmentation.
- setquk 8y agoIt does feel like that. We don't actually issue a signed copy now and we have had precisely one complaint and that was from an enterprise customer. We suggested they downloaded it themselves and gave them the sha256sum of the MSI and they were happy with that.