Click here to get back home

Code Signing, Cab Files and OpenNETCF component

 HomeNewsGroups | Search | About
 microsoft.public.smartphone.developer    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Code Signing, Cab Files and OpenNETCF component Kenø§§v+ºË"¢{&‰Ê貇ír‰ 07-20-2005
  |--> Re: Code Signing, Cab Files and OpenNETCF componen... Kenø§§v+ºË"¢{&‰Ê貇ír‰07-22-2005
  `--> Re: Code Signing, Cab Files and OpenNETCF componen... Kenø§§v+ºË"¢{&‰Ê貇ír‰07-26-2005
Get Chitika Premium
Posted by Kenø§§v+ºË"¢{&‰Ê貇ír‰ on July 20, 2005, 6:29 pm
Please log in for more thread options
Hi,

I have develop an application on smartphone making use of the some of the
OpenNETCF library. My application work wells until I try to implement code
sigining. As this is the first time using security feature on smartphone, now
I am facing some problem.

Now when my application attempt to access the OpenNETCF library, I got an
Access Denies error and the phone seem to stuck in an infinite loop of
prompting me of access denied message. Anyone know how to undo the code
signing thing? I mean go back to running the unsigned application. I suspect
the OpenNETCF is not signed and therefore I got the error. How to make the
OpenNETCF library a signed package?

Thanks


Posted by Robert Levy [MS] on July 21, 2005, 8:45 am
Please log in for more thread options
Right, we don't allow components to call into any component that is *less*
trusted than itself. This is because the OS defines trust on a per-process
basis. If an executable is trusted and it calls into an untrusted dll, that
dll would get to run trusted... very very bad for security.

The easiest way to un-sign something is just to recompile it.

What tool did you use to sign your own binaries? Just repeat that process
for the OpenNETCF DLLs. Or, since OpenNETCF gives you their source code,
you could just copy the source files you need directly into your app.


> Hi,
>
> I have develop an application on smartphone making use of the some of the
> OpenNETCF library. My application work wells until I try to implement code
> sigining. As this is the first time using security feature on smartphone,
> now
> I am facing some problem.
>
> Now when my application attempt to access the OpenNETCF library, I got an
> Access Denies error and the phone seem to stuck in an infinite loop of
> prompting me of access denied message. Anyone know how to undo the code
> signing thing? I mean go back to running the unsigned application. I
> suspect
> the OpenNETCF is not signed and therefore I got the error. How to make the
> OpenNETCF library a signed package?
>
> Thanks




Posted by Kenø§§v+ºË"¢{&‰Ê貇ír‰ on July 22, 2005, 2:54 am
Please log in for more thread options
Hi,

I am using the default signcode.exe using the development certificate.

I am try to retrieve the IMEI to verify the phone identity.

After i recompile, I can still see the digital certificate , when i right
clicked "properties" on the dll and exe file in File explorer. Does this mean
it is still signed?

Thanks

"Robert Levy [MS]" wrote:

> Right, we don't allow components to call into any component that is *less*
> trusted than itself. This is because the OS defines trust on a per-process
> basis. If an executable is trusted and it calls into an untrusted dll, that
> dll would get to run trusted... very very bad for security.
>
> The easiest way to un-sign something is just to recompile it.
>
> What tool did you use to sign your own binaries? Just repeat that process
> for the OpenNETCF DLLs. Or, since OpenNETCF gives you their source code,
> you could just copy the source files you need directly into your app.
>
>
> > Hi,
> >
> > I have develop an application on smartphone making use of the some of the
> > OpenNETCF library. My application work wells until I try to implement code
> > sigining. As this is the first time using security feature on smartphone,
> > now
> > I am facing some problem.
> >
> > Now when my application attempt to access the OpenNETCF library, I got an
> > Access Denies error and the phone seem to stuck in an infinite loop of
> > prompting me of access denied message. Anyone know how to undo the code
> > signing thing? I mean go back to running the unsigned application. I
> > suspect
> > the OpenNETCF is not signed and therefore I got the error. How to make the
> > OpenNETCF library a signed package?
> >
> > Thanks
>
>
>


Posted by Kenø§§v+ºË"¢{&‰Ê貇ír‰ on July 26, 2005, 8:51 am
Please log in for more thread options
Hi,

I got another question on code signing that hope you can answer me.

Now that I got my code sign (currently with test certificate from VS), and I
was able to retrieve the IMEI from the phone. I would like to find out if the
imei string that is recover is actually encrypted as a result of code
signing. I am using OpenNETCF dll to retrieve the IMEI (I signed all the exe
and dll using signtool.exe)

The result i ask is because when I attemp to send over the imei through
webservice, I receive a SOAPException Error with the following message:-
"Server was unable to read request <-- There is an error in XML Document
(1,271) -->

Is this because some part of the Soap message is encrypted as a result of
sending the imei. This doesn't happend if I omit the imei. To illustrate, my
webservice call, the code is as follow :-

service.authenticate(currentuser.Username,currentuser.Password,imei,"");

Exception happen if imei is send over. If this is replace by "" there is no
exception.

Hope you can clear my doubt.

Thanks


"Robert Levy [MS]" wrote:

> Right, we don't allow components to call into any component that is *less*
> trusted than itself. This is because the OS defines trust on a per-process
> basis. If an executable is trusted and it calls into an untrusted dll, that
> dll would get to run trusted... very very bad for security.
>
> The easiest way to un-sign something is just to recompile it.
>
> What tool did you use to sign your own binaries? Just repeat that process
> for the OpenNETCF DLLs. Or, since OpenNETCF gives you their source code,
> you could just copy the source files you need directly into your app.
>
>
> > Hi,
> >
> > I have develop an application on smartphone making use of the some of the
> > OpenNETCF library. My application work wells until I try to implement code
> > sigining. As this is the first time using security feature on smartphone,
> > now
> > I am facing some problem.
> >
> > Now when my application attempt to access the OpenNETCF library, I got an
> > Access Denies error and the phone seem to stuck in an infinite loop of
> > prompting me of access denied message. Anyone know how to undo the code
> > signing thing? I mean go back to running the unsigned application. I
> > suspect
> > the OpenNETCF is not signed and therefore I got the error. How to make the
> > OpenNETCF library a signed package?
> >
> > Thanks
>
>
>


Similar ThreadsPosted
Help with signing CAB files March 22, 2007, 11:59 am
signing code July 16, 2005, 8:16 pm
code signing question July 10, 2005, 4:59 am
Code Signing for Smartphone 2003 - Do I need it? September 2, 2005, 1:52 am
Code Signing Windows Mobile 5 App February 24, 2006, 9:18 pm
WM5 SmartPhone edition - code signing November 29, 2006, 6:46 am
Newbie needs help understanding code signing and certificates February 17, 2007, 8:21 pm
IGraphbuilder::RenderFile fails with error code VFW_E_CANNOT_RENDER for .mp3 files June 18, 2008, 3:44 pm
Help me: Error HRESULT E_FAIL has been returned from a call to a COM component March 3, 2008, 10:57 pm
opennetcf.org-forum down? July 19, 2005, 10:13 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap