signing

Getting around Chrome's Malicious File Warning

我的未来我决定 提交于 2019-11-26 18:26:52
I created an application which comprises a number of *.exe files. I've packaged these up into an NSIS installer which I hosted on my website. When I try to download it Chrome reports it as potentially malicious. At first I thought it could be the URL/site I was hosting on not being recognized so I signed up for Amazon S3 storage and moved the file there. Same problem. I then thought that packing the executables might cause this, so I tried without. Same issue. After some more reading I decided to try signing the executables as well as the installer package EXE. I created a dev cert as follows:

Signing and verifying signatures with RSA C#

南笙酒味 提交于 2019-11-26 16:03:51
I recently posted about issues with encrypting large data with RSA, I am finally done with that and now I am moving on to implementing signing with a user's private key and verifying with the corresponding public key. However, whenever I compare the signed data and the original message I basically just get false returned. I am hoping some of your could see what I am doing wrong. Here is the code: public static string SignData(string message, RSAParameters privateKey) { //// The array to store the signed message in bytes byte[] signedBytes; using (var rsa = new RSACryptoServiceProvider()) { ///

Can I re-sign an .apk with a different certificate than what it came with?

倾然丶 夕夏残阳落幕 提交于 2019-11-26 15:48:16
If I have an apk can I remove the current signing and some how re-sign it with a different .keystore file and still have the application install? Update : I managed to get it to work with Jorgesys' solution and where I messed up before was that I unzipped the .apk then rezipped it after removing the META-INF folder and changed the file extension back into .apk. What I should have done is simply opened it with winzip and delete the folder inside of winzip. try this 1) Change the extension of your .apk to .zip 2) Open and remove the folder META-INF 3) Change the extension to .apk 4) Use the

How can I disable signature checking for Firefox add-ons?

放肆的年华 提交于 2019-11-26 14:27:01
Since version 42, Firefox, by default, refuses to install unsigned add-ons. How do I disable this verification? It is only possible to disable addons verification in Nightly and Developer channel. In other words it is not possible in Beta versions and standard releases . Go to about:config (enter it into address bar) Set xpinstall.signatures.required to false . More at https://wiki.mozilla.org/Addons/Extension_Signing Disable add-on signing check in Release (all) versions of Firefox Firefox version 65+ (or so) The following instructions will disable signature checking on Firefox for the

Signing PDFs on a server document using a signature from the user

无人久伴 提交于 2019-11-26 13:46:59
Here is what I want to do: user creates document (html) edit -> save PDF on server ask if user wants to sign the document (yes) here is the problem (no) no problem ???? (not important) So now the problem I face is how to do that (yes) in step 3. If the signature is on the server no problem, I have some html->php->pdf classes that can sign with digital signatures but the signature must be on the server as a file. The question is, how can I do it directly on the server. The user chooses yes, the signature is read (from his reader on his computer) and send to the server and signing is done. Here

Sign PDF with plain JavaScript

心已入冬 提交于 2019-11-26 12:29:19
With WebCrypto API evolving and being supported by Chrome and Firefox, I would like to use it for digitally signing a PDF document. There is not much of literature around, but I found some examples [1] and a library called PKI.js [2]. In the examples, the signing process is described, but in the end, a signature is returned. I would expect my Base64 PDF file returned again in a signed Base64 string, but sadly, this is not what happens. PKI.js too, to my knowledge, does not provide a way to sign my Base64 PDF. Is there a way to sign a PDF with JavaScript and the WebCrypto API only? The private

How to retrieve Key Alias and Key Password for signed APK in android studio(migrated from Eclipse)

半世苍凉 提交于 2019-11-26 11:54:10
问题 I have an android app currently published in Google Play which I update periodically. I follow the following process to sign the app before a new push: Press right-mouse on the project, the \'Android tools\' -> export signed application package Provide keystore password Sign your app Upload the apk file into Google Play Developer Console Recently I have imported the project from Eclipse to Android Studio and continued working on Android Studio. Now I am planning to push a fix in the app. I

Getting certificate details from an apk

☆樱花仙子☆ 提交于 2019-11-26 09:20:52
问题 How do i go about getting the details of the certificate an apk was signed with. I have a bunch of apks signed with different certificate and I am trying to group them based on their certificate. I can get the certificate expiry details using the jarsigner and complete my task but I was curious if I can get any more details or extract the public key ( I believe it stored in META-INF/cert.RSA but its not readable ) 回答1: Try the following: openssl pkcs7 -inform DER -in CERT.RSA -noout -print

Can I re-sign an .apk with a different certificate than what it came with?

天大地大妈咪最大 提交于 2019-11-26 06:00:24
问题 If I have an apk can I remove the current signing and some how re-sign it with a different .keystore file and still have the application install? Update : I managed to get it to work with Jorgesys\' solution and where I messed up before was that I unzipped the .apk then rezipped it after removing the META-INF folder and changed the file extension back into .apk. What I should have done is simply opened it with winzip and delete the folder inside of winzip. 回答1: try this 1) Change the

How to sign an android apk file

 ̄綄美尐妖づ 提交于 2019-11-26 05:42:25
问题 I am trying to sign my apk file. I can\'t figure out how to do it. I can\'t find good in-depth directions. I have very little programing experience, so any help would be appreciated. 回答1: The manual is clear enough. Please specify what part you get stuck with after you work through it, I'd suggest: https://developer.android.com/studio/publish/app-signing.html Okay, a small overview without reference or eclipse around, so leave some space for errors, but it works like this Open your project in