Digital certificate on files

From: AntoniLopez (AntoniLopez_at_discussions.microsoft.com)
Date: 10/15/04


Date: Fri, 15 Oct 2004 09:13:08 -0700

Hi guys,
I got a digital certificate from Verisign, and now I'm in the process of
code signing a few files. I'm trying first with an exe file and I'm a bit
desperate. I'm using the signcode tool to do it. This is what I write in a
MS-DOS console:
 
signcode /spc C:mycredencials.spc /v a:myprivatekey.pvk /t
http://timestamp.verisign.com/scripts/timstamp.dll c:Project1.exe
 
It seems to work alright, because as soon as I execute this line, my PC goes
to my A drive and fetches my private key, then a form pops up asking for my
private key password (taking care of capital letters and being sure the one
I'm typing is the correct password), and signcode replies with:
 
Error: Failed to build the certificate chain as requested
Error: Signing Failed. Result = 800b010a, (-2146762486)
 
Then, after some seeking, found the following link, reporting the problem as
a bug on W2K, please take a look ...

http://www.derkeiler.com/Newsgroups/microsoft.public.platformsdk.security/2003-10/0381.html

Can anybody help me out, because I spent 400 USD and now this certificate is
not working at all, any workaround for W2K?

Cheers



Relevant Pages

  • Re: Generating my own Software Publisher Certificate
    ... Have you added your user account to the read and enroll permissions on ... code signing certificate" for you. ... > So far I've managed to add the Code Signing template to my Certification ...
    (microsoft.public.platformsdk.security)
  • Re: Generating my own Software Publisher Certificate
    ... I appreciate that it might be as simple as "just enroll for a code signing certificate" for you. ... When requesting a Certificate from my own account I'm not offered the option of requesting a Code Signing Certificate just types of User or Basic EFS. ... > sign my .net assemblies and Macro code. ... >> I know I could purchase an SPC from verisign, ...
    (microsoft.public.platformsdk.security)
  • Re: How do I use my Enterprise Root CA to sign code?
    ... If you're going to request the certificate as an admin, ... ahead and use the certsvr web app after you've added the template. ... >I am the CA administrator (well, all around administrator for our small ... > company) I just don't know how to get the CA to issue a code signing ...
    (microsoft.public.dotnet.security)
  • Re: Question on makecert, signcode, chktrust
    ... Addendum - I'd been using signcode from VS2003 bin directory because it ... makecert, then signtool in signwizard mode, then ran signtool verify /a ... SignTool Error: WinVerifyTrust returned error: 0x800B010D ... With a simple .Net exe I've done this to use a test certificate: ...
    (microsoft.public.security)
  • Re: Certificate Conversion
    ... >We got a code signing certificate from Thawte, ... Its highly unlikely that Thawte would have messed up and included the ... 'serverAuth' bit as part of the x509v3 extensions included in your ...
    (comp.security.unix)