Code Signing Certificate Flag -


is microsoft_root_cert_chain_policy_check_application_root_flag flag used code signing supported on windows xp, windows vista , windows 7?

when using flag in certverifycertificatechainpolicy function on above operating systems, getting

cert_e_untrustedroot error.

it working fine me on windows 8 , above though.

according microsoft

the dwflags member of cert_chain_policy_para structure pointed ppolicystatus parameter can contain microsoft_root_cert_chain_policy_check_application_root_flag flag, which causes function check microsoft application root "microsoft root certificate authority 2011".

so make sure older systems have "microsoft root certificate authority 2011" package installed. more info, see http://support.microsoft.com/kb/931125


to manually install certificates

  1. download http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe

  2. extract files using command rootsupd.exe /c /t:c:\temp\extroot

  3. from c:\temp\extroot run following 4 commands (from elevated prompt)

    updroots.exe authroots.sst
    updroots.exe updroots.sst
    updroots.exe -l roots.sst
    updroots.exe -d delroots.sst


Comments

Popular posts from this blog

java - Suppress Jboss version details from HTTP error response -

gridview - Yii2 DataPorivider $totalSum for a column -

Sass watch command compiles .scss files before full sftp upload -