Home All Groups Group Topic Archive Search About

"Unknown Publisher" alert on XP with Microsoft Firewall

Author
26 Nov 2007 5:29 PM
kcrosbie
Hi,

I have an application that is comprised of:
A main executable
Some dynamically loaded dlls

The application sets up a server listening on a port (9xxx).
I have tried signing all of the files involved with a valid verisign
code-signing certificate.

My problem is that when my application is initializing (I believe when
it is setting up the server socket), users that have a Microsoft
Firewall in place get a Microsoft Security Alert asking them if they
want to keep blocking my app.   This is not my problem, I'm guessing
that is normal.   However, the Publisher in the alert shows up as
Unknown even though it has been signed with my certificate.

My questions are:
* Where does the Publisher field come from?   I always thought it was
the Subject field of the certificate.
* Is there some procedure I need to carry out in order to make the
publisher show up as something the user will recognize?

Best Regards,

Kevin Crosbie
Software Engineer

Author
27 Nov 2007 2:12 PM
kcrosbie
On Nov 26, 6:29 pm, kcros***@ravenpack.com wrote:

> My questions are:
> * Where does the Publisher field come from?   I always thought it was
> the Subject field of the certificate.
> * Is there some procedure I need to carry out in order to make the
> publisher show up as something the user will recognize?
>

Well, it seems I've resolved this.
In case anyone else ever has this problem, the answers to my questions
are:
* The publisher comes from the Company Name field in the Version Info
resource.
* The procedure to get this to show up is to provide the Version Info
resource either when building the executable or as in my case,
afterwards with some tool.   For example, one might do it by loading
the executable in Visual C++, specifying Open As: Resource.   There
also exists command line utilities to do this as part of a build
script, for instance, http://angusj.com/resourcehacker/.

Hope this helps!
Author
28 Nov 2007 3:33 PM
kcrosbie
On Nov 27, 3:12 pm, kcros***@ravenpack.com wrote:

> * The procedure to get this to show up is to provide the Version Info
> resource either when building the executable or as in my case,
> afterwards with some tool.   For example, one might do it by loading
> the executable in Visual C++, specifying Open As: Resource.   There
> also exists command line utilities to do this as part of a build
> script, for instance,http://angusj.com/resourcehacker/.
>
> Hope this helps!

One can also do this programatically using UpdateResource:
http://msdn2.microsoft.com/en-us/library/ms648004.aspx

AddThis Social Bookmark Button