{"action":"created","issue":{"url":"https://api.github.com/repos/Crystalnix/omaha/issues/31","labels_url":"https://api.github.com/repos/Crystalnix/omaha/issues/31/labels{/name}","comments_url":"https://api.github.com/repos/Crystalnix/omaha/issues/31/comments","events_url":"https://api.github.com/repos/Crystalnix/omaha/issues/31/events","html_url":"https://github.com/Crystalnix/omaha/issues/31","id":128319336,"number":31,"title":"How to sign file using installed Certificate instead pfx file","user":{"login":"namtb49","id":12696775,"avatar_url":"https://avatars.githubusercontent.com/u/12696775?v=3","gravatar_id":"","url":"https://api.github.com/users/namtb49","html_url":"https://github.com/namtb49","followers_url":"https://api.github.com/users/namtb49/followers","following_url":"https://api.github.com/users/namtb49/following{/other_user}","gists_url":"https://api.github.com/users/namtb49/gists{/gist_id}","starred_url":"https://api.github.com/users/namtb49/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/namtb49/subscriptions","organizations_url":"https://api.github.com/users/namtb49/orgs","repos_url":"https://api.github.com/users/namtb49/repos","events_url":"https://api.github.com/users/namtb49/events{/privacy}","received_events_url":"https://api.github.com/users/namtb49/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-01-23T10:21:02Z","updated_at":"2016-01-23T10:43:06Z","closed_at":null,"body":"So, I want to developt our update solution based on Omaha protocol (and this source code, respectly) to allow live-update for our customer. After several times try to tangle and digged into this source code and all document related, final I've applied Omaha update solution to my application successful. Every things seem tobe OK, and my software update nicely, btw still minor problem to hinder for the deployment process.\r\nAfter upload update version to some download site and forum for trial purpose, some customer complaint that, when they download this update setup, some common web browser (such as IE or Chrome) warning they about risk security problem. After some research, I knew that because my update software was signed by test certificate (pair with download source), not by Trusted cert, so this may be lead to problem, and more seriously, this may be blocked by some Antivirus or System Protection software.\r\n\r\nI've read in all source and script related to signing process and found that this using signtool utilites from Window SDK to sign all exe and dll file with the pfx/ cert file pair in building process. And to solve this non-trusted problem, it must be to replace these with the suitable file. And according MSDN tutorial page, I knew signtool can be using with many option, one of this is pass input param point to installed Cert has been register by Window system, which I have got from legacy project . And, because every thing have in startup step, so we want to build update software with this preinstall cert, without refund to buy the precious Global key.\r\n\r\nSo could I apply this signing approach with omaha source code, and how could achive this. I've seen in main scons file has some block of code related setup input param to call signtool utilite, but it may be lead to recursive change to many script and py file in other module."},"comment":{"url":"https://api.github.com/repos/Crystalnix/omaha/issues/comments/174169972","html_url":"https://github.com/Crystalnix/omaha/issues/31#issuecomment-174169972","issue_url":"https://api.github.com/repos/Crystalnix/omaha/issues/31","id":174169972,"user":{"login":"thekondr","id":372316,"avatar_url":"https://avatars.githubusercontent.com/u/372316?v=3","gravatar_id":"","url":"https://api.github.com/users/thekondr","html_url":"https://github.com/thekondr","followers_url":"https://api.github.com/users/thekondr/followers","following_url":"https://api.github.com/users/thekondr/following{/other_user}","gists_url":"https://api.github.com/users/thekondr/gists{/gist_id}","starred_url":"https://api.github.com/users/thekondr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thekondr/subscriptions","organizations_url":"https://api.github.com/users/thekondr/orgs","repos_url":"https://api.github.com/users/thekondr/repos","events_url":"https://api.github.com/users/thekondr/events{/privacy}","received_events_url":"https://api.github.com/users/thekondr/received_events","type":"User","site_admin":false},"created_at":"2016-01-23T10:43:06Z","updated_at":"2016-01-23T10:43:06Z","body":"Hi @namtb49,\r\n\r\nYou can try to export installed certificate into pfx file.\r\n\r\nPlease check this [article](https://www.sslshopper.com/move-or-copy-an-ssl-certificate-from-a-windows-server-to-another-windows-server.html)."}}