Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Security / November 2007

Tip: Looking for answers? Try searching our database.

"Unknown Publisher" alert on XP with Microsoft Firewall

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
kcrosbie@ravenpack.com - 26 Nov 2007 17:29 GMT
Hi,

I have an application that is comprised of:
A main executable
Some dynamically loaded dlls

The application sets up a server listening on a port (9xxx).
I have tried signing all of the files involved with a valid verisign
code-signing certificate.

My problem is that when my application is initializing (I believe when
it is setting up the server socket), users that have a Microsoft
Firewall in place get a Microsoft Security Alert asking them if they
want to keep blocking my app.   This is not my problem, I'm guessing
that is normal.   However, the Publisher in the alert shows up as
Unknown even though it has been signed with my certificate.

My questions are:
* Where does the Publisher field come from?   I always thought it was
the Subject field of the certificate.
* Is there some procedure I need to carry out in order to make the
publisher show up as something the user will recognize?

Best Regards,

Kevin Crosbie
Software Engineer
kcrosbie@ravenpack.com - 27 Nov 2007 14:12 GMT
On Nov 26, 6:29 pm, kcros...@ravenpack.com wrote:

> My questions are:
> * Where does the Publisher field come from?   I always thought it was
> the Subject field of the certificate.
> * Is there some procedure I need to carry out in order to make the
> publisher show up as something the user will recognize?

Well, it seems I've resolved this.
In case anyone else ever has this problem, the answers to my questions
are:
* The publisher comes from the Company Name field in the Version Info
resource.
* The procedure to get this to show up is to provide the Version Info
resource either when building the executable or as in my case,
afterwards with some tool.   For example, one might do it by loading
the executable in Visual C++, specifying Open As: Resource.   There
also exists command line utilities to do this as part of a build
script, for instance, http://angusj.com/resourcehacker/.

Hope this helps!
kcrosbie@ravenpack.com - 28 Nov 2007 15:33 GMT
On Nov 27, 3:12 pm, kcros...@ravenpack.com wrote:

> * The procedure to get this to show up is to provide the Version Info
> resource either when building the executable or as in my case,
[quoted text clipped - 4 lines]
>
> Hope this helps!

One can also do this programatically using UpdateResource:
http://msdn2.microsoft.com/en-us/library/ms648004.aspx

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.