
Signature
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
Hello;
Ok, if I don't want to use the config file because that requires the user to
edit it which is a pain for them and they can screw it up - how do I do this?
Word wants strongly named dlls for it's Add-Ins, security requires strong
naming. But I want to allow minor version changes to work together.
It seems to me this would be a common request - to match the strong name
hash and that the major.minor version number matches, but the revision.build
does not need to match. Is there some way to pre-load the DLL, check the
match myself, and then if it's loaded, .NET just uses it?

Signature
thanks - dave
> Hi Dave,
>
[quoted text clipped - 15 lines]
> Get Secure! - www.microsoft.com/security
> This posting is provided "AS IS" with no warranties, and confers no rights.
NuTcAsE - 18 Jan 2006 16:50 GMT
You could do this by creating a publisher policy (since your assemblies
are strongly signed and authenticode singned).
MSDN Link to creating a publisher policy:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cp
concreatingpublisherpolicyfile.asp
Another article on creating publisher policies:
http://www.informit.com/guides/content.asp?g=dotnet&seqNum=362&rl=1
Hope this helps...
- NuTcAsE
David Thielen - 18 Jan 2006 17:31 GMT
Hello;
That would work for some cases but I think it may be a bad idea in ours. We
have a program that anyone can install - a single msi file and it asks the
standard what directory and that's it. And no admin rights required.
I think this would get tricky as we now need this file to go in the GAC
which could require an administrator. Also, our files are not in the GAC - I
assume that is ok for this as it does not say it's required.
So...
1) Does placing this in the GAC require more permissions than installing DLL
files to a directory under Program Files?
2) Will this work if the DLLs involved are not in the GAC?

Signature
thanks - dave
> You could do this by creating a publisher policy (since your assemblies
> are strongly signed and authenticode singned).
[quoted text clipped - 8 lines]
>
> - NuTcAsE
"Peter Huang" [MSFT] - 19 Jan 2006 06:02 GMT
Hi Dave,
To match the full qualified name of a strongname DLL is the by design
behavior, which is used to protect the identity of a certian dll.
We can not change the default behavior, unless we customized ourself CLR
runtime.
But this did not apply to the Office application, because the CLR is setup
and lauched by Word.
Also it is not trivial to develop an customized CLR.
Here is a book for your reference.
Customizing the Microsoft? .NET Framework Common Language Runtime
http://www.microsoft.com/MSPress/books/6895.asp
The app.config commonly should be changed by the deployment when we want to
deploy a new version DLL to the end user, we can change the app.config in
the deployment package.
Thanks!
Best regards,
Peter Huang
Microsoft Online Partner Support

Signature
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.