What to do with a code signing certificate?

My company ordered a code signing certificate from Symantec, and I was given the task of using it. I have no idea how to do this, and there are no clear instructions even on their website. I have a certificate in .cer format, and when I try to use it in Visual Studio 2013 - the properties window, it says that it does not have a private key associated with it. I searched and found that the .pvk file will be stored in the registry from which we ordered the certificate. Given that I can get the .pvk file, I want to know what to do next. I have two files and I need the .pfx format (which contains the private key). I know that this is not exactly a programming issue, but I hope someone had the same problem as mine and they can guide me.

I am working on a WPF application.

+4
source share
3 answers

This is pretty easy to do.

Decision

ON ONE MACHINE USED TO ORDER A NEW CERTIFICATE, right-click the .cer file and install it.

Then go to the same browser that was used when ordering the certificate and exported the certificate.

  • In IE, go to the menu (gear icon) → Internet Options → Content. Select a certificate and click "Export ...".
  • In Chrome, go to the menu (3 bars) → Settings → Advanced → Certificate management. Select a certificate and click "Export ...".
  • Firefox Firefox ( ) → → → → → . " ...".

, . , ", ". "Personal Information Exchange - PKCS # 12 (.PFX)" " , " " ".

.PFX .P12, .

CSR ( ). ( ) . CSR, CA ( , ) . , CSR , CA , .

CSR . , .PFX. .CER. .CER , CSR, CSR PK .CER. PK .PFX.

+4

- Symantec ( ASCII).

  • .cer, .
  • .cer . .
  • ( certmgr.msc ).
  • , (, ).
  • , .
  • PFX. , , , , .
  • , PFX, Microsoft signtool.exe( SDK Windows):

:

signtool sign /f your_exported.pfx /p <your_password> /t http://timestamp.verisign.com/scripts/timestamp.dll /v App-installer.msi
0
source

Source: https://habr.com/ru/post/1525740/


All Articles