[Mono-bugs] [Bug 350958] Authenticode timestamps don't verify

bugzilla_noreply at novell.com bugzilla_noreply at novell.com
Thu Jan 10 10:01:00 EST 2008


https://bugzilla.novell.com/show_bug.cgi?id=350958

User spouliot at novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=350958#c1


Sebastien Pouliot <spouliot at novell.com> changed:

           What    |Removed                                         |Added
----------------------------------------------------------------------------
             Status|NEW                                             |ASSIGNED
         OS/Version|Mac OS X 10.5                                   |All
            Summary|X509Certificates broken                         |Authenticode timestamps don't verify




--- Comment #1 from Sebastien Pouliot <spouliot at novell.com>  2008-01-10 08:00:59 MST ---
The problem is related to timestamping - signing without timestamp works
correctly. 

poupou at pollux:~/src/bugzilla> signcode -v dave.pvk -spc dave.spc selfcheck.exe
Mono SignCode - version 1.2.6.0
Sign assemblies and PE files using Authenticode(tm).
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2007 Novell. BSD
licensed.

Success
poupou at pollux:~/src/bugzilla> chktrust selfcheck.exe
Mono CheckTrust - version 1.2.6.0
Verify if an PE executable has a valid Authenticode(tm) signature
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2007 Novell. BSD
licensed.

WARNING! selfcheck.exe is not timestamped!
SUCCESS: selfcheck.exe signature is valid
and can be traced back to a trusted root!


I need to check what changed (new certificates, different hierarchy...) wrt to
timestamps.


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the mono-bugs mailing list