Author Topic: Vendors for purchasing digital signature for stencil macros?  (Read 5162 times)

0 Members and 1 Guest are viewing this topic.

healthNut

  • Full Member
  • ***
  • Posts: 79
Vendors for purchasing digital signature for stencil macros?
« on: November 23, 2012, 12:37:21 PM »
I plan on selling my stencils with vba macros. Has anybody purchased the digital signatures from a trusted MS partner? Would you share your experience and insight?
My goal is to assure my customers that the product is safe.
The cost from the MS trusted partners seems to defeat any profit I expect to gain though.

Paul Herber

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2746
    • Paul Herber's website
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #1 on: November 23, 2012, 12:53:50 PM »
http://codesigning.ksoftware.net/

Just a happy customer.
Electronic and Electrical engineering, business and software stencils and applications for Visio -

http://www.paulherber.co.uk/

Nikolay

  • Hero Member
  • *****
  • Posts: 783
    • UnmanagedVisio
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #2 on: November 23, 2012, 02:35:09 PM »
I could recommend this one: http://startssl.com/ - almost three times cheaper ;) 
(Class2 - $60 for 2 years). These are okay for signing for macro / exe / setup.
Note that there  is a small catch, though - if a customer did not run windows update for 3 years, this certificate won't work (they became root authority not that long ago).

Mind that only if you need WinQUAL (e.g. to be able to pick up crash dumps of you program from Microsoft servers)  or e.g. for a device driver, or you want to pass windows logo certifications you have to go to VeriSign / GlobalSign. (In fact, you can still  buy one now for $100 / year from VeriSign (Symantec now). The link to buy for $100 instead of $500 is still there on VeriSign site, they just made it extremely hard to find)
« Last Edit: November 23, 2012, 02:40:31 PM by Nikolay »

healthNut

  • Full Member
  • ***
  • Posts: 79
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #3 on: November 24, 2012, 12:40:59 AM »
Thanks Nikolay and Paul! You guys are always helpful.

healthNut

  • Full Member
  • ***
  • Posts: 79
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #4 on: July 21, 2013, 01:27:53 PM »

Paul Herber

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2746
    • Paul Herber's website
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #5 on: July 22, 2013, 07:15:18 AM »
That article is very out of date, and Fastspring don't sell signing certificates.
Electronic and Electrical engineering, business and software stencils and applications for Visio -

http://www.paulherber.co.uk/

healthNut

  • Full Member
  • ***
  • Posts: 79
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #6 on: July 22, 2013, 08:25:46 AM »
Thanks

Nikolay

  • Hero Member
  • *****
  • Posts: 783
    • UnmanagedVisio
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #7 on: October 01, 2013, 05:14:31 AM »
It turns out that cheap StartSLL certificates ($60 for 2 years) have a limitation.

The signature expires when certificate expires, even if the signed binary/macro has a timestamp.

That is, normally the signature does not expire when certificate expires, if it was valid at the time of signing;
this is not the case for (usual) StartSLL certificates (they have specific flag set in the certificate).

healthNut

  • Full Member
  • ***
  • Posts: 79
Re: Vendors for purchasing digital signature for stencil macros?
« Reply #8 on: October 01, 2013, 09:19:03 AM »
Interesting