问题描述
我们已经从GoDaddy购买了代码签名证书,对我们的软件进行了签名,但是当我尝试安装该应用时-它仍然显示“未知发行商”,并且防病毒和防火墙正在破坏安装。到今天,我已经重新键入了证书的密钥,并且已经完成了四次整个过程。我在整个过程中没有任何问题或错误,并使用signtool成功签署了setup.exe。我该怎么办?
这是我的操作方式:
-
我用PC生成的CSR重新加密了GoDaddy颁发的证书,并按照以下说明检查“使我的私钥可导出”:https://www.ssltrust.com.au/help/setup-guides/code-signing-certificates
-
我使用以下GoDaddy CSR测试工具测试了我的CSR:https://ssltools.godaddy.com/views/csrDecoder-一切正常
-
我向GoDaddy提交了CSR,重新输入了证书并下载了新的.pem和.spc
-
我按照以下说明使用MMC-> certmgr导入.spc文件并导出.pfx:https://ca.godaddy.com/help/windows-install-codedriver-signing-certificate-and-create-pfx-file-2698?locale=en
-
在Visual Studio中,我按照以下说明发布 unsigned 应用程序:https://docs.microsoft.com/en-us/visualstudio/deployment/how-to-sign-setup-files-with-signtool-exe-clickonce?view=vs-2019
-
我按照以下说明使用signtool签名setup.exe:https://ca.godaddy.com/help/signtool-sign-windows-code-with-a-code-signing-certificate-4778?locale=en
在cmd中,我运行:
C:\Program Files (x86)\Microsoft SDKs\ClickOnce\SignTool>signtool sign /f C:\Users\plvan\Desktop\cert\key.pfx /p MyStrongPwd /tr http://tsa.starfieldtech.com /td SHA256 c:\Users\plvan\source\repos\IAD\DesktopApp1\publish\IAD1.3.0.0\setup.exe
命令成功:
Done Adding Additional Store Successfully signed: c:\Users\plvan\source\repos\IAD\DesktopApp1\publish\IAD1.3.0.0\setup.exe
如果我运行“验证”
C:\Program Files (x86)\Microsoft SDKs\ClickOnce\SignTool>signtool verify /v /pa c:\Users\plvan\source\repos\IAD\DesktopApp1\publish\IAD1.3.0.0\setup.exe
结果是:
Verifying: c:\Users\plvan\source\repos\IAD\DesktopApp1\publish\IAD1.3.0.0\setup.exe
Signature Index: 0 (Primary Signature)
Hash of file (sha1): 90941E5E4178D58CCAC2FA750C861F63440B90A7
Signing Certificate Chain:
Issued to: Starfield Root Certificate Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Expires: Thu Dec 31 16:59:59 2037
SHA1 hash: B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E
Issued to: Starfield Secure Certificate Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Expires: Sat May 03 00:00:00 2031
SHA1 hash: 7EDC376DCFD45E6DDF082C160DF6AC21835B95D4
Issued to: Matrioshka Ltd.
Issued by: Starfield Secure Certificate Authority - G2
Expires: Tue Sep 28 14:19:47 2021
SHA1 hash: 5941FE2F9BC8FA31102EAB994F91AE2CEDC1FF34
The signature is timestamped: Thu Oct 01 19:02:04 2020
Timestamp Verified by:
Issued to: Starfield Root Certificate Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Expires: Thu Dec 31 16:59:59 2037
SHA1 hash: B51C067CEE2B0C3DF855AB2D92F4FE39D4E70F0E
Issued to: Starfield Secure Certificate Authority - G2
Issued by: Starfield Root Certificate Authority - G2
Expires: Sat May 03 00:00:00 2031
SHA1 hash: 7EDC376DCFD45E6DDF082C160DF6AC21835B95D4
Issued to: Starfield Timestamp Authority - G2
Issued by: Starfield Secure Certificate Authority - G2
Expires: Tue Sep 09 00:00:00 2025
SHA1 hash: 7280A5FCD8DFE11F01FE8601B15EC41A376F05E2
Successfully verified: c:\Users\plvan\source\repos\IAD\DesktopApp1\publish\IAD1.3.0.0\setup.exe
Number of files successfully Verified: 1
Number of warnings: 0
Number of errors: 0
我怀疑我做对了所有事情,但是证书本身就是问题所在。我给GoDaddy打了电话,他们说这没问题。有什么想法吗?
解决方法
暂无找到可以解决该程序问题的有效方法,小编努力寻找整理中!
如果你已经找到好的解决方法,欢迎将解决方案带上本链接一起发送给小编。
小编邮箱:dio#foxmail.com (将#修改为@)