[Mono-dev] [mono][chktrust]: signature can't be traced back to a trusted root!

Robert Jordan robertj at gmx.net
Wed Aug 24 07:16:50 EDT 2011


On 24.08.2011 08:15, jaysonp wrote:
> Hi all,
>
>      I am trying to use chktrust to verify validity of the digital/counter
> signature of a file. Specifically, I used AcroRD32.exe, which's been signed
> by Adobe Systems, Incorporated and counter signed by verisign time stamping
> service.
> To add this to mono trust store, I exported the actual certificates (.cer
> files) to a specific folder (e.g c:\temp) and used certmgr like this:
>           certmgr -add -c -m Trust c:\temp\Adobe.cer
>           certmgr -add -c -m Trust c:\temp\Ver.cer
>
> Command prompt tells that certificates were successfully added to the store.
> However, when I ran chktrust on AcroRD32.exe, still, signature cannot be
> traced, signified by the error "ERROR! AcroRd32.exe signature can't be
> traced back to a trusted root!"

You did not import the roots of the certs. You must export both
certs as PKCS#7 including the whole cert path.

Robert



More information about the Mono-devel-list mailing list