Re: Verifying Digital Signatures - Different results on different



The self-signed certificate is ok.
There is definitely something wrong with the digital signature itself (as
verified on XP pro sp2 with all security updates).
Would be interesting to get details of what systems VERIFY the signature as
valid.
Not sure why the signature is invalid though. Will poke around as time
permits.
- Mitch

"PhilW" <PhilW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A06FA256-97CB-49C1-99ED-9ECEC8671FF7@xxxxxxxxxxxxxxxx
Mitch,

I did hear back from the customer and the details that are shown for the
good case and the bad case are identical.

I also uploaded a test executable, in tabeware.zip, to ftp.ecrane.com (but
forgot to give the username and password, which are both 'ecrane').

Regards,

Phil

"Mitch Gallant" wrote:

So what is the status on this? I think I noticed that a few responses
have
been removed.
- Mitch

"Mitch Gallant" <jensigner@xxxxxxxxxxxxxxxx> wrote in message
news:O8R$kPffHHA.1252@xxxxxxxxxxxxxxxxxxxxxxx
Can you see if there is more information available in the Details pane?
Usually there will be more information on why the digital signature is
not
valid (like unknown or untrusted issuer or something similar).
If you can sign some simple exe with the same certificate/key and point
me
to it, I can look at see what the problem might be.
- Mitch

"PhilW" <PhilW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CED55689-3F1B-4F30-B112-DE9923E84A22@xxxxxxxxxxxxxxxx
This is being reported by a customer of ours, so I may not have the
complete
information.

The error message is shown in the Digital Signature Details window and
reads
"This digital signature is not valid". What other information could I
get
that would help.

The signer's cert is issued by Verisign.

The failures occur on most XP systems. The Vista machines accept the
signature.

Regards,

Phil

"Mitch Gallant" wrote:

Is the reason for "invalid" shown?
Is the signer's cert issued by a known CA?
What OS ?
- Mitch

"PhilW" <PhilW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:925C5189-EEE5-4D59-A3E1-A39A4FDB7971@xxxxxxxxxxxxxxxx
I have signed an executable with SignTool. On some PC's the
Signature
(as
shown by Explorer) is shown as valid, on others it's shown as
invalid.

What could account for this?

Phil










.



Relevant Pages

  • SharePoint 2007 invalidates digital signatures with Word 2003.
    ... SharePoint 2007 document libraries appear to be writing hidden data ... to become invalid. ... Here is a sample of actions that can cause a Word digital signature to ... SharePoint 2007 document library. ...
    (microsoft.public.word.docmanagement)
  • Re: Verifying Digital Signatures - Different results on different
    ... I did hear back from the customer and the details that are shown for the ... "Mitch Gallant" wrote: ... Usually there will be more information on why the digital signature is not ... If you can sign some simple exe with the same certificate/key and point me ...
    (microsoft.public.platformsdk.security)
  • Re: Verifying Digital Signatures - Different results on different
    ... the exe seems to contain other data. ... the signature at the tail end of the binary file. ... There is definitely something wrong with the digital signature itself (as ... "Mitch Gallant" wrote: ...
    (microsoft.public.platformsdk.security)
  • Re: Verifying Digital Signatures - Different results on different
    ... I think I noticed that a few responses have ... Usually there will be more information on why the digital signature is not ... The error message is shown in the Digital Signature Details window and ... "Mitch Gallant" wrote: ...
    (microsoft.public.platformsdk.security)
  • Re: Verifying Digital Signatures - Different results on different
    ... Can you see if there is more information available in the Details pane? ... Usually there will be more information on why the digital signature is not ... The error message is shown in the Digital Signature Details window and ... "Mitch Gallant" wrote: ...
    (microsoft.public.platformsdk.security)