[Interest] Qt Install Framework - Becoming a Microsoft Known Publisher

[Jason H]

It was 10 years ago that I first signed Qt binaries with a cert. Consult the MS pages on who to buy a code signing cert from, but 300EUR seems high. I think I got mine for $70USD
It's just a matter of signing the binary with the right kind of cert from someone in the MS trust domain. It was a trivial exercise.




> Sent: Tuesday, October 09, 2018 at 11:58 AM
> From: "Nils Jeisecke via Interest" <interest at qt-project.org>
> To: "Nuno Santos" <nunosantos at imaginando.pt>
> Cc: "interestqt-project.org" <interest at qt-project.org>
> Subject: Re: [Interest] Qt Install Framework - Becoming a Microsoft Known Publisher
>
> Am 09.10.2018 um 16:29 hat Nuno Santos geschrieben:
> > There are several providers for this. Globalsign is just one. Then you will receive a usb dongle with your certificate (GlobalSign sends a USB dongle).
> Yeah, and the glorious signtool will ask for a PIN every time your
> automated build signs the executable...
> 
> Not Qt related at all but just in case someone is interested - This is
> an alternative signing client implementation that allows the PIN to be
> specified on the command line (there are probably more secure ways, but
> you need that super secure USB token anyway...):
> 
> https://pastebin.com/6iYNKLpN
> 
> See the stackoverflow link for pointers on how to export the
> certificate.
> 
> Nils
> 
> _______________________________________________
> Interest mailing list
> Interest at qt-project.org
> http://lists.qt-project.org/mailman/listinfo/interest
>