Re: Generating Certificates for assemblies

try to import that cert into the "trusted root CA folder" - using the certificates MMC snapin.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

A few questions from someone who hasn't done this before.

I run the following commands

makecert.exe -n "CN=Certifit" -sv yourkeypair.pvk yourcert.cer

cert2spc.exe yourcert.cer yourspc.spc

signtool.exe sign /a /s "Trusted Root Certification Authorities"
ConflictResolver.dll

signtool.exe verify /v /a ConflictResolver.dll

With the following output from the Verify command

Verifying: ConflictResolver.dll
Unable to verify this file using a catalog.
SignTool Error: A certificate chain processed, but terminated in a
root
certificate which is not trusted by the trust provider.
Signing Certificate Chain:
Issued to: DEV\steve
Issued by: DEV\steve
Expires: 3/02/2007 3:57:43 p.m.
SHA1 hash: C9AB267C0701D83C6B2707EDFE92444E899D1A3E
File is not timestamped.
SignTool Error: File not valid: ConflictResolver.dll
Number of files successfully Verified: 0 Number of warnings: 0 Number
of errors: 1

1. Who or what is a trust provider?
2. How do I associate my certificate with one of these?
3. When I deploy to my client so, do I have to go through the same
hoo-haa as I have just been through or is this easily transferrable?
Fighting a losing battle so far so any help is appreciated.

Cheers
Steve


.

Relevant Pages

  • Re: Unable to use stunnel with tin...
    ... Looks like you got an odd version of stunnel. ... was getting the certificate written correctly. ... Next verify you can connect to the server. ...
    (comp.os.linux.setup)
  • RE: Verifying X509Certificate signature
    ... issue--with that sort of data I know what data to pass to Verify. ... As you said that you want some information about verifying X509 certificate ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Are ++ and -- operators really more efficient
    ... But you still need a way to verify that it's the right key. ... the signature contains a URL indicating ... where the certificate can be found. ... (This idea that public keys represent principals -- ...
    (comp.lang.c)
  • RE: Verifying X509Certificate signature
    ... I've got that you actually want to verify the signed certificate. ... Joe has mentioned, this is something related to verify the certificate ... cert store to retrieve key info in cert and do some RSA signing and ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: how can we restrict what certificate WSE will use?
    ... > X509SecurityTokenManager to verify the request is from a trusted client. ... > certificate to build a valid signature and encrypted data section. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)