Editing Codesign

Jump to: navigation, search

Warning: You are not logged in.

Your IP address will be recorded in this page's edit history.
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision Your text
Line 14: Line 14:
 
Latest Windows is 10 (at the time of this document) so it should support Win 10 x64 at least, since that is presumably the direction Microsoft is taking Windows, and any requirements here will be true for future versions of Windows.  
 
Latest Windows is 10 (at the time of this document) so it should support Win 10 x64 at least, since that is presumably the direction Microsoft is taking Windows, and any requirements here will be true for future versions of Windows.  
  
Support of older Windows builds ''would be nice'' - At least, Windows Server, Win 8, Vista?
+
Support of older Windows builds ''would be nice'' - At least, Windows Server, 8, Vista.
  
  
Line 21: Line 21:
 
* To avoid Test Mode, the Driver (kernel component) has to be codesigned.
 
* To avoid Test Mode, the Driver (kernel component) has to be codesigned.
  
(Is this the correct assumption? It is not entirely clear - I don't mind the Smartscreen warning, or having to click "trust this anyway" as long as it can be done without Test Mode and reboot.)
+
(Is this the correct assumption? It is not entirely clear - I don't mind the Smartscreen warning, or having to click "trust this anyway" as long as it can be done with Test Mode and reboot.)
  
  
 
* To codesign Win10 x64 I must first get EV certificate, it can not be Standard.
 
* To codesign Win10 x64 I must first get EV certificate, it can not be Standard.
  
[https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/get-a-code-signing-certificate | get a code signing certificate]
+
[https://docs.microsoft.com/en-us/windows-hardware/drivers/dashboard/get-a-code-signing-certificate)| get a code signing certificate]
  
  
* DigiCert had me show 2 IDs, 2 Skype video calls to fill in forms together, but I must also have a Registered Company. (Not non-profit, nor Organization - they check with Government)
+
* DigiCert had me show 2 IDs, 2 Skype video calls, fill in forms together, but I must also have a Registered Company. (Not non-profit, nor Org)
  
 
(Because of IDs and valid address, I then have to register in Japan.)
 
(Because of IDs and valid address, I then have to register in Japan.)
Line 36: Line 36:
 
* To register a company costs about $13,000.  
 
* To register a company costs about $13,000.  
  
[https://www.juridique.jp/business/incorporation_procedure.php Juridique]
+
[https://www.juridique.jp/business/incorporation_procedure.php|Juridique]
[https://www.healyconsultants.com/japan-company-registration/ Healy]
+
[https://www.healyconsultants.com/japan-company-registration/|Healy]
  
=== Update ===
 
  
I have been informed [https://community.osr.com/discussion/291088/options-for-opensource-codesign#latest] that the EV certification requirement is only in regards to '''Secure Boot'''. A "Class 3 Code-Signing Certificate" is sufficient for Win10 x64 signing with Secure Boot disabled. This will do for now - if it works out.
+
=== Future ===
  
I have obtained a Class 3 signing certificate, and produced a signed Installer.
+
* Use EV to "Register for the Hardware Program".
  
For codesigning, I have DevStudio set to inf2cat stamp, and sign. With the extra commandline "/tr http://timestamp.digicert.com /td sha256 /fd sha256 ". I have set
+
* Obtain through Hardware Program a Cross-Certificate
Inno Setup to codesign all *.exe and the final installer .exe.  This workflow is acceptable.
+
 
 +
* Sign compiled code
 +
 
 +
* Upload CAB file
 +
 
 +
* Pass $something - presumably some testing
 +
 
 +
* Download signed CAB file

Please note that all contributions to OpenZFS on OS X may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see OpenZFS on OS X:Copyrights for details). Do not submit copyrighted work without permission!

Cancel | Editing help (opens in new window)