[Interest] Qt Install Framework - Becoming a Microsoft Known Publisher
jhihn at gmx.com
Tue Oct 9 18:04:23 CEST 2018
It was 10 years ago that I first signed Qt binaries with a cert. Consult the MS pages on who to buy a code signing cert from, but 300EUR seems high. I think I got mine for $70USD
It's just a matter of signing the binary with the right kind of cert from someone in the MS trust domain. It was a trivial exercise.
> Sent: Tuesday, October 09, 2018 at 11:58 AM
> From: "Nils Jeisecke via Interest" <interest at qt-project.org>
> To: "Nuno Santos" <nunosantos at imaginando.pt>
> Cc: "interestqt-project.org" <interest at qt-project.org>
> Subject: Re: [Interest] Qt Install Framework - Becoming a Microsoft Known Publisher
> Am 09.10.2018 um 16:29 hat Nuno Santos geschrieben:
> > There are several providers for this. Globalsign is just one. Then you will receive a usb dongle with your certificate (GlobalSign sends a USB dongle).
> Yeah, and the glorious signtool will ask for a PIN every time your
> automated build signs the executable...
> Not Qt related at all but just in case someone is interested - This is
> an alternative signing client implementation that allows the PIN to be
> specified on the command line (there are probably more secure ways, but
> you need that super secure USB token anyway...):
> See the stackoverflow link for pointers on how to export the
> Interest mailing list
> Interest at qt-project.org
More information about the Interest