[fpc-pascal] Signing applications, how?

[Elmar Haneke]

> And now I am getting a request for "signing" the applications (and/or possibly
> the installers made by InnoSetup) and I have no idea on how to do this.

Signing an FPC application can be done completely independent of 
FPC/Lazarus applying singntool (from Windows SDK) to compiled binary.

InnoSetup has support for singing, it also can sign uninstaller executable.

> Apparently some customers cannot install the software because of IT department
> policies prohibiting running unsigned programs...

In addition they have to trust your certificate used for signing.

Technically you can sign using an selfsigned certificate. But 
"IT-Department" has to add that to trustlist.

Presumably you have to by an codesign certificate


> What to do about this? Most involved products are for Windows and they are 32
> bit.

There is no difference in signing 32 or 64 Bit.

> The process should be possible to be applied to already existing exe files
> because the builds can no longer be performed since the original dev
> environments no longer exist.

You should exclude FreePascal / Delphi from your search - just look for 
signing win32 application.

Elmar

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freepascal.org/pipermail/fpc-pascal/attachments/20240812/c78c5bc0/attachment.htm>