 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
.NET Forum / Windows Forms / WinForm General / June 2007Expired certificates in the clickonce manifest.
My VB apps written in Visual Studio 2005 are starting to have their certificate expiration date older than the current date. If I create or use a newer certificate I have to uninstall the app and reinstall. Is there a way to fix an expired certificate without uninstalling? Hi, By default, a certificate issued by a Certificate Authorities(CA) is only valid for 12 months. Typically, certificate expiration would mean that you need to resign your ClickOnce application every 12 months. Authenticode mitigates the need for this with support for time-stamping. The Timestamp Server URL feature allows you to supply a service that will time stamp your manifest during the publishing process. When you sign a ClickOnce deployment using a certificate, ClickOnce records the date and time of the signing and embeds it in the deployment's digital signature. So long as the deployment was signed when the certificate was still valid, ClickOnce will allow the application to run even if the certificate has since expired. As for the time stamp service, Verisign, Inc. is an example of a CA that provides this kind of service. You may use the following Timestamp server URL: http://timestamp.verisign.com/scripts/timstamp.dll Alternatively, you may create a command-line assembly that updates the certificate. A KB article has provided sample code for this. You may read the KB article from the link below: http://support.microsoft.com/kb/925521 Hope this helps. Sincerely, Linda Liu Microsoft Online Community Support ================================================== Get notification to my posts through email? Please refer to http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif ications. Note: The MSDN Managed Newsgroup support offering is for non-urgent issues where an initial response from the community or a Microsoft Support Engineer within 1 business day is acceptable. Please note that each follow up response may take approximately 2 business days as the support professional working with you may need further investigation to reach the most efficient resolution. The offering is not appropriate for situations that require urgent, real-time or phone-based interactions or complex project analysis and dump analysis issues. Issues of this nature are best handled working with a dedicated Microsoft Support Engineer by contacting Microsoft Customer Support Services (CSS) at http://msdn.microsoft.com/subscriptions/support/default.aspx. ================================================== This posting is provided "AS IS" with no warranties, and confers no rights. Hi, How about the problem now? If you need our further assistance, please feel free to let me know. Thank you for using our MSDN Managed Newsgroup Support Service! Sincerely, Linda Liu Microsoft Online Community Support Hi, I have a question with regard to the KnowledgeBase solution: The solution with the RenewCert is probably only possible with certificates that you created yourself and not with certificates issued by a Certifcate Authority, isn't it? So the problem that you cannot update applications anymore after such a CA certificate expired remains - you can start them (if they are timestamped) but you cannot update because you cannot sign with an expired certificate and the new certificate will have a different keypair. Is there another way of doing that or are there plans to solve this problem - e.g. by providing some kind of "handover" manifest where you can connect the expiring certificate with the new one? Best regards, Stefanie > Hi, > [quoted text clipped - 7 lines] > Linda Liu > Microsoft Online Community Support Hi, How about the problem now? If you need our further assistance, please feel free to let me know. Thank you for using our MSDN Managed Newsgroup Support Service! Sincerely, Linda Liu Microsoft Online Community Support It took me several attempts but I got the C++ update to work. Thanks for your help.... Wally > Hi, > [quoted text clipped - 7 lines] > Linda Liu > Microsoft Online Community Support Hi Wally, Thank you for your feedback on how you solved the problem by yourself. By the C++ update you have mentioned, do you mean Microsoft Visual C++ 2005 SP1? Sincerely, Linda Liu Microsoft Online Community Support Hi Linda, No. Sorry I was referring to the Microsoft Visual C++ Win32 console application called RenewCert from the support.microsoft.com/default.aspx/kb/925521 (workaround method 2). Is there a fix or correction in the SP1 for Visual Studio 2005? Thanks.... Wally > Hi Wally, > [quoted text clipped - 6 lines] > Linda Liu > Microsoft Online Community Support Hi Wally, Sorry for my delayed reply. No, Visual Studio 2005 Service Pack 1 doesn't contain the fix of this problem. For a complete list of bug that are fixed in Visual Studio 2005 Service Pack 1,you may refer to the following article: 'List of bugs that are fixed in Visual Studio 2005 Service Pack 1' http://support.microsoft.com/?kbid=918526 Hope this helps. Sincerely, Linda Liu Microsoft Online Community Support
Free MagazinesGet these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...
|
Reply to this Message
|
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2008 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.