You recommend tweaking the EXE which has a digital signature

Single Click discussions / bugs

You recommend tweaking the EXE which has a digital signature

Postby lwc » 2013-05-17 21:47

On the one hand, your official recommendation is to tweak the resulting EXE ("you should instead download SecureVNCPlugin that works perfectly").
On the other hand, the new version contains a digital signature which makes it a read-only file (at least unless you remove the signature).

Please allow adding extra files in the archive before you sign it.
Last edited by lwc on 2013-10-16 17:12, edited 2 times in total.
lwc
20
20
 
Posts: 48
Joined: 2006-08-08 11:00

Re: The new version's digital signature

Postby Rudi De Vos » 2013-05-18 14:57

No, this wil never be allowed.
By signing the archieve we certify it's verus and trojan free.
If we allow other to add or change files the signing doesn't have any value. We even could loose our certificat
by allowing misuse.
Rudi De Vos
Admin & Developer
Admin & Developer
 
Posts: 5626
Joined: 2004-04-23 10:21

Re: The new version's digital signature

Postby Rudi De Vos » 2013-05-18 15:05

The MSRC4 use the MS crypto engine, this mean that SC doesn't contain any encryption code ( it use the MS dll's) and that it can be freely
distributed.
The new plugin use openssl and and has a ECCN 5D002 export restriction.
Rudi De Vos
Admin & Developer
Admin & Developer
 
Posts: 5626
Joined: 2004-04-23 10:21

Re: The new version's digital signature

Postby lwc » 2013-05-21 06:30

Than the official instructions should at least state how to remove that signature in order to modify the archive.
lwc
20
20
 
Posts: 48
Joined: 2006-08-08 11:00


Return to SC

Who is online

Users browsing this forum: No registered users and 1 guest

cron