Signing a Windows app

[Matthias Rebbe]

You’ll still need (to purchase) a Code Signing certificate. But the “new” ones cannot be exported anymore. Your private key is either stored on a usb token or in a virtual token in the cloud.
In both cases (hardware token or virtual token) you will need to install additonal software. For the hardware token you have to install drivers and for the virtual token some kind of software for access the virtual token in the cloud.
Here’s a cheap vendor for both types of certificate
https://www.sslpoint.com/code-signing-certificates/

Matthias


Von meinem iPad gesendet
> Am 23.07.2025 um 00:21 schrieb Bob Sneidar via use-livecode <use-livecode at lists.runrev.com>:
> 
> OK I am trying that out. I created my first self-signed certificate. Not sure where to go from here. Do I need to create a project, or can I just download the certs, and then what do I do with them?
> 
> Thanks for any assistance you can give.
> 
> Bob S
> 
> 
>> On Jul 22, 2025, at 2:31 PM, Tom Glod via use-livecode <use-livecode at lists.runrev.com> wrote:
>> 
>> Hi Bob, I think there were changes to this over the last few years, and now
>> signing windows software requires hardware keys and etc.
>> So yes I think the lesson is burnt toast.
>> Which is why I use a signpath.io ....
>> Their fee includes the hardware key and the user experience is great, you
>> upload your zip, and everything gets signed with your certificate.
>> That windows unknown developer warning does not show up.
>> Sorry, thats all i got.
>> 
>>> On Tue, Jul 22, 2025 at 4:52 PM Bob Sneidar via use-livecode <
>>> use-livecode at lists.runrev.com> wrote:
>>> 
>>> Hi all.
>>> 
>>> I am ready to sign a Windows app and I am trying to follow the
>>> instructions on the livecode lessons page. I downloaded the Windows
>>> SignTool and installed it. I navigated to the folder containing Pvk2Pfx.
>>> The instructions say that running a command (which I will not copy/paste
>>> here for obvious reasons) will create a PFX file from my PVK and SPC files.
>>> First of all, WHAT FILES? Secondly, when I run the command, it says that
>>> Pvk2Pfx is not recognized as the name of a cmdlet, function, script file,
>>> or operable program. But I’m looking right at it in the folder! Is this
>>> lesson obsolete??
>>> 
>>> Bob S
>>> 
>>> _______________________________________________
>>> use-livecode mailing list
>>> use-livecode at lists.runrev.com
>>> Please visit this url to subscribe, unsubscribe and manage your
>>> subscription preferences:
>>> http://lists.runrev.com/mailman/listinfo/use-livecode
>>> 
>> _______________________________________________
>> use-livecode mailing list
>> use-livecode at lists.runrev.com
>> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
>> http://lists.runrev.com/mailman/listinfo/use-livecode
> 
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode