[fpc-pascal] Signing applications, how?

[Derek Edson]

I have been using signtool for a number of years for apps built with Delphi
and/or FPC.

The question of whether you need a expensive CA based certification will
depend on your IT department.

Any certificate from any certification authority will work to sign an app,
but it needs to be trusted by Windows for it to be used. Microsoft include
a number of CA root certificates in the Windows distribution/updates, which
may vary between Windows version.

Use MMC, add/remove snapin, and select Certificates for the Local Computer.
You can then see the supported root and intermediate certificates on your
computer.

Your IT department can add another CA root certificate by using group
policy. This will also be push it to all computers on the network.

https://docs.omnissa.com/bundle/Horizon8InstallUpgrade/page/AddtheRootCertificatetoTrustedRootCertificationAuthorities.html

Derek

On Sun, 11 Aug 2024, 1:33 am Bo Berglund via fpc-pascal, <
fpc-pascal at lists.freepascal.org> wrote:

> On Sat, 10 Aug 2024 13:32:12 +0200, Luca Olivetti via fpc-pascal
> <fpc-pascal at lists.freepascal.org> wrote:
>
> >El 10/8/24 a les 11:28, Jeppe Johansen via fpc-pascal ha escrit:
> >
> >> It's fairly straight-forward to use this on executables. You point it
> at
> >> the EXE and the code signing certificate you will use.
> >
> >I guess you'll have to get ($$$) a valid signing certificate too.
> >
>
> Can I use LetsEncrypt certificates or must I cash out big to get a working
> one?
>
>
> --
> Bo Berglund
> Developer in Sweden
>
> _______________________________________________
> fpc-pascal maillist  -  fpc-pascal at lists.freepascal.org
> https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freepascal.org/pipermail/fpc-pascal/attachments/20240811/b3a3dcee/attachment.htm>