Missing Code Signature

[sebastian-philipp]

Hi,

this is especially bad for apps that want to change the system configuration, because I really have no way to tell if someone replaced the executable with something malicious.

[RichiCoder1]

/cc @ferventcoder

[Daniel15]

You can get an inexpensive code signing cert for open-source projects from Certum: https://www.certum.eu/certum/cert,offer_en_open_source_cs.xml. It's 14 Euro per year.

[ferventcoder]

We'll be doing this for 0.15.0 with our Chocolatey Software authenticode cert.

[LawrenceIRL]

@ferventcoder How far out are we from the official 0.15 release with the executable signed?

[ferventcoder]

Not that far. Working on this now.

[ferventcoder]

This is actually delaying the release now, as the the WixProj wants to rebuild ChocolateyGui.exe after I've signed it.

[gep13]

@ferventcoder This should go back to the 0.15.0 milestone, right?

[ferventcoder]

Yes, apologies.

[LawrenceIRL]

Thanks for the updates and I see that it's closed now too!

[winnieXY]

Hey,
I've problems with excution of ChocolateyGUI right now related to the certificate.

It's stated that the certificate is revoked by the issuer, see screenshot below.

What's wrong here?

[ferventcoder]

This has moved over to #505 (@winnieXY opened).