Signing certificates

[SimonMac]

Like anonymous rep do we have to sign all certificates with MF?

[xoggoth]

Cheers PAH. I did find a link about self signing and started going through it but then came across an article that said a self signed certificate will still cause the user to get a warning message on download anyway. Is that not the case?

How to generate a self signed certificate
How to create a self-signed Certificate

[PAH]

Create your own self signed certificate.

No need to pay a 3rd party for a certificate to say you trust your own work and hosting.

IIRC you can create certificates in Visual Studio for testing. Can then use these 'test' certificates if you are hosting yourself and have control over installing the certificate in IIS etc, or are doing click once deployment which includes the cert in the deployment.

I know this as I did it myself a while back, when the client's certificate had long expired and they wanted me to update a click once download package with a modified Windows app. Instead of faffing around trying to get a new certificate installed (endless paperwork and bulltulip hoops to jump through) I just used the test one, seeing as the app is only downloaded by a few people and they need to be authenticated via a web app anyway to get to the download link.

[xoggoth]

Ta for comments. Bleeding eck, these buggers want a lot of money for doing next to nothing.

[Netraider]

My current client use these guys Linky

[doodab]

I believe you need to buy a suitable "Authenticode" certificate from a commercial CA such as verisign.

[xoggoth]

Almost got program downloads sorted, now I need to sign my exe files so users don't get a security warning. Found some stuff about MS signtool but not sure where I get a certificate, clear as mud on net.

Any experiences on this? Cheers.