Re: Expired certificate

AMEN!!!
Thanks for bringing this point up
Brian

"Joe Kaplan" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:uIK%23YkFBIHA.4160@xxxxxxxxxxxxxxxxxxxxxxx
BTW, it is also worth pointing out that putting a timestamp on your signed code can help deal with some of the issues of expired certificates. The whole point of a timestamp is to provide some sort of validation of when the code was signed so that if the signing cert expires but the timestamp was within the validity period of the certificate, the client can still treat the signature on the code as valid.

Of course, this doesn't help with the existing assets if they weren't timestamped, but since you are going to have to resign everything anyway, make sure you DO apply a timestamp this time around. :)

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Brian Komar" <brian.komar@xxxxxxxxxxxxxxxxx> wrote in message news:ueBwQZEBIHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
There really is nothing you can do, as you can only renew with the same key pair during the validity period of the certificate.
Once you miss the date, you are toast.
This sounds like it is signed by a commercial provider, so setting back the clocks is not an option
Time to get signing

Brian




.

Relevant Pages

  • Re: Expired certificate
    ... it is also worth pointing out that putting a timestamp on your signed ... code can help deal with some of the issues of expired certificates. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... key pair during the validity period of the certificate. ...
    (microsoft.public.windows.server.security)
  • Re: Expired certificate
    ... you say that in my next certificate I have to timestamp. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services ...
    (microsoft.public.windows.server.security)
  • Re: Enable LDAP over SSL
    ... "Joe Kaplan" wrote: ... To ensure this root certificate is valid on the remote computer, ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Event Category: LDAP Interface ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM & SSL connect over SSL
    ... I installed a p7b certificate on the client machine in the current user ... Joe Kaplan wrote: ... I install the CA certificate with certsrv. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Code Signing Clarification
    ... compare timestamp with validity of the certificate so that it doesn't pass an ... > the validity period of the certificate, with a timestamp, the authenticating ...
    (microsoft.public.platformsdk.security)