Click Once Signing Practices?
Apr 26, 2010
I have an app published using ClickOnce. When an app is published that way, you get a temporary certificate which expires in a year. My year will be up in a couple months, and I am considering my options.One option, which a colleague is using, is to build a more sustained certificate using makecert.exe. By doing this, I can get a certificate of arbitrary length (or so I am told, as I haven't actually followed this route, yet). The problem with this route is that MS is pretty clear that makecert is for testing purposes.
I can also see that I could go to verisign or some such and buy a certificate, but that has a significant cost (well, I'm sure my employer wouldn't be too concerned about it, but it seems pretty high to me). The program has very narrow applicabiliity and narrow appeal (it has to do with counting fish). What I am wondering is whether there is sound reason to go with a certificate that is more than what makecert will create, and what that reason is? Additionally, I'm looking for information as to whether an internal CA, such as we have, which can make a certificate, will cause me any trouble if I use it to sign a ClickOnce app that won't be used entirely internal?
View 7 Replies
ADVERTISEMENT
Sep 27, 2009
Where can I get a free code signing certificate for signing my applications? Ascertia used to give them out for free but apparently they don't anymore.
View 3 Replies
May 27, 2009
I'm deploying my first VB .NET windows program onto our local network. Its a firewalled intranet, and our adminstrator has it locked down tight internally. All our applications will never see the outside world, they are for internal use only...accounting, shipping, and other DB's located in 6 remote plants. So, do I need to offer up any kind of certification with "signing" in my "click once" deployment?
View 2 Replies
Dec 8, 2009
I have a general question regarding best practices for exception handling. I have a class library that uses structured error handling. The functions in the library generally perform some mathematical calculations and all return a boolean value indicating whether an exception occured or not (i.e. exception occured = true, no exception = false). The actual calculated result in the function is returned as a ByRef parameter.
Anyway the input variables for my calculations are all passed to the funtions as parameters. I perform some basic checks on these inputs (e.g check that an input is not negative etc) as part of the function code. The next stage is where im unsure of the best way to do things. Using the example i just mentioned, if an input parameter is negative, I can either throw an exception such as "ArgumentOutofRange", or i can simply show a messagebox with some info about what happened. Either way i do it the function will return true. At the moment i am throwing an exception, but on reading the "Best practices for exception handling" it is recommended you dont throw an exception for things that can be checked programatically because of "performance/overhead issues".
I'm a little confused by what they mean by this. What kind of overhead are they talking about? Slower program? More disk space required? More memory required? When my functions return true, the calling methods basically drop everything and stop calculations (exit sub), so im not sure that the overhead issues they are talking about are as important to me. It seems easier and neater to throw an exception and utilize some global error strings and pass some parameters rather than copy and paste messagebox.show() all the time, and modify the text to suit the situation. Another argument for me would be that both methods of exception handling utilize a messagebox, which stops code execution until the user does something. So i cant see the issue with the performance overhead.
View 5 Replies
Aug 29, 2011
I'm an avid programmer, and I'm trying to teach myself more professional practices, but Ilook over my code, and point out any mistakes, or bad practices I may have attached to this actually working bit of code. It consists of a procedure for retrieving, sending, and above all connecting to a server program. As for the various amounts of sloppy commented out code, after a long time clearing my head, I came to my senses so to speak.
Imports System.Net.Sockets
Imports System.Text
Imports System.Threading.Thread
View 4 Replies
May 2, 2010
I have read and worked through all of the examples in the book "ADO.NET 2.O", but there is so much there with so many ways to handle data, I am having difficulty translating the examples into my own real life application. I am confused about creating runtime connection strings, connection strings in my app.config file, connection strings in the properties for a sql connection control, etc.
I have a midichildform with a datagridview control, and I use a table adapter to edit and update the SQL Server 2005 Express edition database. There is no problem there. However, I also have a button control that I want to use to "process" the data that has been updated with the table adapter. I want to open the updated table, read each record on at a time, manipulate the data and add a records to another table. Do I have to create a connection string and an oleDBconnection? Or can I somehow use the connection string that is in my app.config file? [Code]
View 9 Replies
May 28, 2009
What are good things to check for, with respect to error-handling, when you are dealing with the data-access-layer? For example, let's assume I have this function..
Public Function UserExists(ByVal userName As String) As DataTable
Dim dt As Object = Nothing
Dim arSqlParameters(0) As SqlParameter
[code]....
How would you go about ensuring that your code elegantly handles anything unexpected in a situation like this?
View 5 Replies
Sep 11, 2010
I'm reading a binary file into a bindinglist of (t); to be bound to a datagridview.Each line in the file represents a single transaction but I need to consolidate and or filter transactions that meet certain criteriaI know how to do this from a mechanical standpoint (looping the list while adding each item, and adding a new item, or merging the data with an existing item), but I'm looking for a practice, pattern, existing components, or something else that I'm missing (I'm drawing a blank for keywords to search).I don't want to reinvent the wheel if I don't have too. I'm particularly concerned with speed and performance issues with 100k plus records to process in some instances.Currently working with .NET 2.0, but will move to 3.5 if a particularly sexy solution exists.
View 2 Replies
May 19, 2010
Time ago, I migrated to windows 7, and to get my old code running, I was forced to run Visual studio as administrator.Now I want to recode, so Visual Studio, and the program do not need to run as administrator.The first problem I get is that Visual Studio 2008 does not save the modified files without administrator rights.
Each time I try to save a file (or even run the code, which saves the files before running), I get the error message "The operation could not be completed".
it seems that I don't have rights to overwrite those files.Also, when my code crash (because I don't have administrator rights), I cannot debug. I am asked to open another instance of visual studio, but it refuses to debug, because the code is already opened.
View 6 Replies
Jan 2, 2011
I see tool like SN which generates private/public key pair for signing an assembly. And using AL tool we can assign a strong name to an assembly. And we have also Sign tool which is used for signing the assembly (probably for using with certificates exclusively?). What is the exact difference between the two?. Is it sign tool have to be used when working with certificates and can it we acheive it SN?. or are they totally different.?
View 1 Replies
Jan 27, 2012
I'm converting a VB6 dll to VB.Net using Visual Studio 2008 Express. I want to use the same .dll to integrate with Excel via Excel-DNA, but also to be available via COM (I need to be able to call it from VBScript and VBA).
If I leave the assembly unsigned, I have access to all of the ExcelDNA functionality but no COM access.
If I sign the assembly with a strong name, then when I try to build the .dll I get the following error:
Unable to emit assembly: Referenced assembly 'ExcelDna.Integration' does not have a strong name.What are my options?
View 2 Replies
Mar 21, 2009
I've got a project which I would like to sign, however I've never done it before and I'm having a bit of trouble. The problem is that one of the dll files the project references is not signed. This results in an error, stating that the project assembly cannot be signed due to an unsigned referenced assembly. I'm not the author of the problematic unsigned assembly, so I can't sign it directly from VS (or at least I don't know how).
View 3 Replies
Apr 22, 2011
I can encrypt/decrypt fine with a certificate that is in a PFX file because the Private Key is contained in the X509Certificate2, but if I import the certificate to my personal store and mark the private key as non-exportable I have almost no clue what to do to get the decryption done. I have narrow traces to CryptoAPI but I haven't been able to find any articles or code sample neither in VC++ nor C# (to be translated to VB.NET)..
View 3 Replies
Aug 7, 2009
"Error 2 An error occurred while signing: Key not valid for use in specified state." I found this solution on the internet but I have no idea how to do it."Delete all data sources in the Server Explorer and add them again. Run the wizard again."
View 1 Replies
Apr 6, 2010
when I try to publish a program it gives signing error like this:
Quote:
Error2An error occurred while signing: Failed to sign binReleaseapp.publish\setup.exe. SignTool Error: Signtool requires CAPICOM version 2.1.0.1 or higher. Please copy the latest version of CAPICOM.dll into the directory that contains SignTool.exe. If CAPICOM.dll exists, you may not have proper permissions to install CAPICOM.Liquid Transfer
It happens to a company computer and who knows what updates it has. It was working fine the first day I got the computer though.
View 2 Replies
Feb 3, 2011
When I build my project I get a compile error stating "Could not locate the manifest signing certificate in the certificate store". This is a new one to me and I have no idea how to solve it.
View 1 Replies
Dec 9, 2010
I have developed an active x control and signed it with certificate. I know that digital signing is needed , so that the browser knows that the active x comes valid source.My asp.net form has a button , which invokes a method on activex control as -[code]....
But it errors on browser stating that the - IE has blocked this site from using an active x control in an unsafe manner. ( Please see attachment).So should I have to develop the active x control which implement IObjectSafety and also signed digitally, so that it can execute on client browser without any warnings from IE. Any examples.
View 1 Replies
Oct 26, 2009
Hi guys, we have an application which requires elevation to admin rights on VISTA/Windows 7 machine because it provides an ActiveX interface. We can't at present get around this requirement. With a manifest file and on a VISTA machine we get the UAC administrator prompt 'An unidentified program wants access to your computer' and logon request. Disabling UAC is not an option with our clients. I believe that authenticode signing the EXE will at least make the program trusted and thus remove the logon request. But I believe we will still be left with a grey prompt that asks something like 'Did you run this program, do you want to continue' - is this correct? Is there any way of getting rid of the prompts completely?
View 3 Replies
Oct 23, 2009
how can I create a certificate for signing a ClickOnce manifest. At [URL] I have read that makecert is only for testing purposes. So what shall I use to get an certificate?
View 1 Replies
May 2, 2009
The .NET security model throws security errors whenever a .NET exe is run from a file share. The error does not appear when ran from a local drive. Does anyone know of a way around this without requiring the code to be signed?
View 7 Replies
Apr 5, 2009
My application is small, I intend to use the installer that comes with VS 2008 Prof.Edition, or ClickOnce.I'm wondering which is better, I need to include a copy of the .NET framework 2.0 in a package, and have it installed simply, and also be easy to uninstall.
View 4 Replies
Oct 15, 2010
I requested a Code Signing Certificate from my own domain Certification Authority on my Windows 2008 R2 domain controller.
When trying to publish my code to my webserver via Clickonce, it throws "an error occurred while signing: Invalid provider type specified"
In order to get the certificate I duplicated the Code Signing template on my CA, and tried both options available:
1) must use Microsoft Software Key Storage Provider
2) use any provider available locally
algorithm is RSA, key minim size 2048, Hash SHA1, alternative format unchecked
View 1 Replies
Feb 14, 2008
I'm having a problem publishing an application written in VB.NET in VS2005 using ClickOnce.I get the error:
Code Snippet
View 4 Replies
Dec 4, 2009
when I try to publish my app I get this error.I am using VB 2008 XE on Win XP
Error2An error occurred while signing: Failed to sign binReleaseapp.publish\setup.exe. SignTool Error: ISigned
:Sign returned error: 0x80880253
The signer's certificate is not valid for signing.SignTool Error: An error occurred while attempting to sign: binReleaseapp.publish\setup.exeMITS 2008
View 1 Replies
Dec 4, 2009
I get this error when I try to publish: Error 2 An error occurred while signing: Failed to sign binReleaseapp.publish\setup.exe. SignTool Error: ISignedCode::Sign returned error: 0x80880253
The signer's certificate is not valid for signing.
SignTool Error: An error occurred while attempting to sign: binReleaseapp.publish\setup.exe MITS 2008
I downloaded the .net 3.5 sp1 and it performed a repair but it still will not publish.
View 8 Replies
Jun 6, 2010
I went to load an app I was working on before my system died a few days back and I loaded up VB Express 2010 .Net, opened my project and saw this error ...
Error1Unable to find manifest signing certificate in the certificate store.HexHelperProject
If this is related to the Security Certificates stored by XP, then I'm in trouble as they are GONE. Must I start a new project and rebuild this whole app?
View 1 Replies
Feb 24, 2009
Do I have to sign my VB.NET applications? I'm getting an error: SignTool reported an error 'Keyset does not exist' But have no interest in signing anything as the project is small and will only be used internally to my department. I could create a temporary key. But why would I want to?
View 4 Replies
Dec 15, 2010
I am having an issue getting the below error. This error is in a small mail app using smtpClient. I had this working on this same computer but had to reformat and now I am getting the error. The error does not display anymore info then what is below and do not know where or how to fix it.error: Unable to find manifest signing certificate in the certificate store.
View 2 Replies
Mar 25, 2009
Dear Sir,When I publish my package, i am getting the following error.
[Code]...
I think this can be solved by Changing the validity in the signing property of the package. But I'm not able to change this period.
View 1 Replies
Feb 6, 2007
I've got an error: "Unable to find manifest signing certificate in the certificate store"
View 3 Replies
