digital-signature

How can I digitally sign an executable?

旧巷老猫 提交于 2019-11-29 19:34:24
I'm coding software that requires administrative access. When a UAC dialog pops up, it shows a different popup for digitally signed software than non-signed software. I believe digitally signing my software would enable users to trust my software easier. Does it cost thousands of dollars to digitally sign software, or is it free? Is there a simple way to do it? I've searched around Google and all I get is how to sign PHP, XML, and PDF files, which is not what I want. I need to sign my software executable. Just saw something about sigtool.exe? Is this the right direction? What about those

Checking digital signature programmatically from Delphi

孤街浪徒 提交于 2019-11-29 19:27:31
I need a function in Delphi to verify the digital signature of an external EXE or DLL. In my particular application, I am going to occasionally invoke other processes, but for security purposes I want to make sure these executables were created by our organization before running them. I have seen Microsoft's example in C , however, I do not want to waste the time translating this to Delphi if somebody else already has. I would prefer a snippet or code example over a third-party library. Thanks. Here you go: // IsCodeSigned, which verifies that the exe hasn't been modified, uses //

Digitally signing an SQL Server database record or an insert/update operation

生来就可爱ヽ(ⅴ<●) 提交于 2019-11-29 18:26:09
问题 Is there a way to somehow digitally sign the current state of a database record or a particular field with a particular user's certificate or AD credential, etc? I need to implement some kind of record level approval where the correctness and validity of a particular field or fields or a row is signed by a username/password combination or with some certificate. Data should be always visible in the record, all I need is to be able to tell: who and when approved the data. I do not need to

What changed in the driver signature requirements for Windows 8?

若如初见. 提交于 2019-11-29 17:02:57
问题 I've got a passthrough NDIS intermediate driver, consisting of two .inf files (one standard and one miniport) and a .sys file. Because of the Windows 7 driver signing requirements, I had to get a code-signing certificate and sign the .sys file in order for the driver to install on a 64-bit system. This works fine, and I have many successful Windows 7 installs. However, the same installer fails on the Windows 8 Consumer Preview (64-bit). If I boot with Windows Signature Enforcement turned off,

In Itext 7, how to sign a pdf with 2 steps?

北城以北 提交于 2019-11-29 16:48:45
Following the answers given in this previous question : In Itext 7, how to get the range stream to sign a pdf? , i've tried to reimplement the two steps signing method working in Itext 5 but i encounter an issue when trying to reopen the document result of the first step (with the PdfReader or a pdf reader).(invalid document) Here is the presigning part for a document already containing an empty signature field named certification ... why is the result of this step invalid ? PdfReader reader = new PdfReader(fis); Path signfile = Files.createTempFile("sign", ".pdf"); FileOutputStream os = new

Access installed certified to sign

筅森魡賤 提交于 2019-11-29 15:41:45
I am trying to sign an Object in a Java + JSF project. What I have done so far is create my own X509 certificate as well as a CA with XCA and install both of them on Firefox and Chrome. I have been searching for 3 days how could I access it to sign (the typical pop-up asking for select a certificate in case you have more than one installed) but I just cannot find something useful. I have seen multiple times this code line: X509Certificate[] certs = (X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate"); but I have no clue about where can I get that request with the

How to Digitally Sign a Dynamically Created PDF Document Using PDFBox?

人盡茶涼 提交于 2019-11-29 15:40:43
问题 Pardon Me! I am poor in java. Please Correct me wherever I am wrong and improve wherever I am poor! I am trying to digitally sign a dynamically created pdf using PDFBox with the following program: Tasks in the Program: (i) Creating Template PDF (ii) Updating ByteRange, xref, startxref (iii) Constructing Original Document for Signature Creation (iv) Creating Detached Enveloped Digital Signature (v) Constructing Digitally Signed PDF Document by concatenating Original Doc Part - I, Detached

Validating Azure AD Token signature fails JAVA

*爱你&永不变心* 提交于 2019-11-29 14:45:25
问题 I am struggling to validate an Azure AD token signature. When I look up the correct key description in the "jwks_uri" field under https://login.microsoftonline.com/common/.well-known/openid-configuration I check the belonging key data . I try to use the "n" - modulus and "e" fields to generate the public key for the signature validation I end up with an error: BASE64Decoder decoder = new BASE64Decoder(); byte[] modulusBytes = decoder.decodeBuffer(n); byte[] exponentBytes = decoder

How to verify that my orgainization signed a trusted windows binary?

纵饮孤独 提交于 2019-11-29 09:44:34
问题 This is a followup question to question 1072540, 'WinVerifyTrust to check for a specific signature?'. I want to write a C++ function Lets call it TrustedByUs of the form: bool TrustedByUs(std::string pathToBinary, std::string pathToPublicKey) The idea is that we give this function a path to a binary .dll or .exe file that has been signed with a digital signature. The pathToPublicKey string is the path to a public key of our particular signing certificate. Using the code in http://support

Digital Signature SunMSCAPI provider & MS Crypto API

我只是一个虾纸丫 提交于 2019-11-29 08:05:38
I want to sign file with the SunMSCAPI provider. As public key and signatures needs to be imported using MS Crypto API. Generally generating signatures with SHA1withRSA , ends up with big-endian to little-endian (byte order) conversion. //generate keystore with java keytool $Keytool -genkey -alias tsign -keystore c:\test\tsignjks.p12 - keyalg rsa -storetype pkcs12 In Java application: //for signing and getting keystore, assuming windows certificate is installed ..ks = KeyStore.getInstance("Windows-MY","SunMSCAPI"); PrivateKey priv = ks.getKey("tsign",password); Signature rsa = Signature