ExcelBanter

ExcelBanter (https://www.excelbanter.com/)
-   Excel Programming (https://www.excelbanter.com/excel-programming/)
-   -   Code signing certificate (https://www.excelbanter.com/excel-programming/433503-code-signing-certificate.html)

Michelle

Code signing certificate
 
Can anyone reccomend an affordable way to sign my macros?

Self-cert is no good for me as the tick-box to "always trust content
from..." is only available on the machine it was created on.

But I can only find certificates that cost hundreds of dollars a year.

I'm happy to pay for a certificate, but they seem VERY expensive for what
I'm going to use them for. AND they only last for a year.

Have I missed something? Is there a longer lasting one, or a cheaper
alternative? Or can I do something to enable the "Always trust content
from..." tick box so that I could use the self-cert option?

All input vey gratefully received

Thanks

M


kassie

Code signing certificate
 
Can't you just copy your certificate to the other machines as well?

Press <Alt<F11 to go to VBA. Click on Tools, digital Signatures, view
your signature, select copy to file, and then follow the prompts to export it
to a file. Mail this to the other user.
To import, left click on the attachemnt, select open. Now click on the set
contact trust button. When the Import Contact Settings box appears, check
the first two option boxes and click OK, and OK out.

Now open the signed project, select the imported signature, and sign. You
can now make changes on the user's PC
--
HTH

Kassie

Replace xxx with hotmail


"Michelle" wrote:

Can anyone reccomend an affordable way to sign my macros?

Self-cert is no good for me as the tick-box to "always trust content
from..." is only available on the machine it was created on.

But I can only find certificates that cost hundreds of dollars a year.

I'm happy to pay for a certificate, but they seem VERY expensive for what
I'm going to use them for. AND they only last for a year.

Have I missed something? Is there a longer lasting one, or a cheaper
alternative? Or can I do something to enable the "Always trust content
from..." tick box so that I could use the self-cert option?

All input vey gratefully received

Thanks

M


JLatham

Code signing certificate
 
Besides what you said, usually you are required to be a 'business' and
registered as such to obtain anything other than self-cert. About the least
expensive I've seen is through GoDaddy.com ($199.99/yr or $179.99/yr if you
purchase 2 yrs at once). And they have the must-be-a-business rule in effect.

Look at what Kassie suggested, probably the easiest way to go if you have a
established group that you want to provide a certificate to so that using
your applications is easier for them. But if it comes down to that, it's
usually a matter of trust, and my clients seem to trust my work, signed or
not. I mean they've got to have trust in you to install your self-cert on
their systems anyhow, don't they?

"Michelle" wrote:

Can anyone reccomend an affordable way to sign my macros?

Self-cert is no good for me as the tick-box to "always trust content
from..." is only available on the machine it was created on.

But I can only find certificates that cost hundreds of dollars a year.

I'm happy to pay for a certificate, but they seem VERY expensive for what
I'm going to use them for. AND they only last for a year.

Have I missed something? Is there a longer lasting one, or a cheaper
alternative? Or can I do something to enable the "Always trust content
from..." tick box so that I could use the self-cert option?

All input vey gratefully received

Thanks

M


kassie

Code signing certificate
 
Very true, but it is nice to run on High security, and so keep out other
junk. I find that doing it this way saves a lot of hassel, and of course it
is for free!

--
HTH

Kassie

Replace xxx with hotmail


"JLatham" wrote:

Besides what you said, usually you are required to be a 'business' and
registered as such to obtain anything other than self-cert. About the least
expensive I've seen is through GoDaddy.com ($199.99/yr or $179.99/yr if you
purchase 2 yrs at once). And they have the must-be-a-business rule in effect.

Look at what Kassie suggested, probably the easiest way to go if you have a
established group that you want to provide a certificate to so that using
your applications is easier for them. But if it comes down to that, it's
usually a matter of trust, and my clients seem to trust my work, signed or
not. I mean they've got to have trust in you to install your self-cert on
their systems anyhow, don't they?

"Michelle" wrote:

Can anyone reccomend an affordable way to sign my macros?

Self-cert is no good for me as the tick-box to "always trust content
from..." is only available on the machine it was created on.

But I can only find certificates that cost hundreds of dollars a year.

I'm happy to pay for a certificate, but they seem VERY expensive for what
I'm going to use them for. AND they only last for a year.

Have I missed something? Is there a longer lasting one, or a cheaper
alternative? Or can I do something to enable the "Always trust content
from..." tick box so that I could use the self-cert option?

All input vey gratefully received

Thanks

M


Gord Dibben

Code signing certificate
 
Kassie

Are you saying that you can export a selfcert DS to another computer?

Easy enough to create a *.cer file but how do you export the key?


Gord Dibben MS Excel MVP

On Sun, 13 Sep 2009 02:52:01 -0700, Kassie wrote:

Very true, but it is nice to run on High security, and so keep out other
junk. I find that doing it this way saves a lot of hassel, and of course it
is for free!



kassie

Code signing certificate
 
Hi Gord,

From a previous post of mine. . .
Press <Alt<F11 to go to VBA. Click on Tools, digital Signatures, view
your signature, select Copy to file, and then follow the prompts to export it
to a file. Mail this to the other user.
To import, left click on the attachemnt, select open. Now click on the set
contact trust button. When the Import Contact Settings box appears, check
the first two option boxes and click OK, and OK out.

Now open the signed project, select the imported signature, and sign. You
can now make changes on the user's PC

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

Kassie

Are you saying that you can export a selfcert DS to another computer?

Easy enough to create a *.cer file but how do you export the key?


Gord Dibben MS Excel MVP

On Sun, 13 Sep 2009 02:52:01 -0700, Kassie wrote:

Very true, but it is nice to run on High security, and so keep out other
junk. I find that doing it this way saves a lot of hassel, and of course it
is for free!




Gord Dibben

Code signing certificate
 
No problem copying to file *.cer

But how do you export the Private Key or do you need it?

I have tried this previously but was never able to make it work.

I have tried installing into Trusted Root Certificates and Trusted
Publishers but when I tried to use the DS I received the message about not
having a key.

If not too much trouble could you email me a copy of a selfcert DS so I may
install on my computer?

gorddibbATshawDOTca


Thanks, Gord

On Sun, 13 Sep 2009 21:44:02 -0700, Kassie wrote:

Hi Gord,

From a previous post of mine. . .
Press <Alt<F11 to go to VBA. Click on Tools, digital Signatures, view
your signature, select Copy to file, and then follow the prompts to export it
to a file. Mail this to the other user.
To import, left click on the attachemnt, select open. Now click on the set
contact trust button. When the Import Contact Settings box appears, check
the first two option boxes and click OK, and OK out.

Now open the signed project, select the imported signature, and sign. You
can now make changes on the user's PC



kassie

Code signing certificate
 
While I have never used this info, have a look at the following site:
http://www.source-code.biz/snippets/vbasic/3.htm

Christian d'Heureuse suggests the use of makecert.exe, cert2spc.exe and
pvkimprt.exe to achieve this objective. These commands form part of the .NET
Framework and Platform SDK.

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

No problem copying to file *.cer

But how do you export the Private Key or do you need it?

I have tried this previously but was never able to make it work.

I have tried installing into Trusted Root Certificates and Trusted
Publishers but when I tried to use the DS I received the message about not
having a key.

If not too much trouble could you email me a copy of a selfcert DS so I may
install on my computer?

gorddibbATshawDOTca


Thanks, Gord

On Sun, 13 Sep 2009 21:44:02 -0700, Kassie wrote:

Hi Gord,

From a previous post of mine. . .
Press <Alt<F11 to go to VBA. Click on Tools, digital Signatures, view
your signature, select Copy to file, and then follow the prompts to export it
to a file. Mail this to the other user.
To import, left click on the attachemnt, select open. Now click on the set
contact trust button. When the Import Contact Settings box appears, check
the first two option boxes and click OK, and OK out.

Now open the signed project, select the imported signature, and sign. You
can now make changes on the user's PC




Gord Dibben

Code signing certificate
 
Thanks for the pointer to that site.

I will look into this Kassie.

From your earlier reply to OP I thought your sending of the DS to another
computer was referring to a selfcert DS.

I guess you meant a commercial DS


Gord


On Wed, 16 Sep 2009 00:12:01 -0700, Kassie wrote:

While I have never used this info, have a look at the following site:
http://www.source-code.biz/snippets/vbasic/3.htm

Christian d'Heureuse suggests the use of makecert.exe, cert2spc.exe and
pvkimprt.exe to achieve this objective. These commands form part of the .NET
Framework and Platform SDK.



kassie

Code signing certificate
 
No, it was a selfcert DS, but have never worked on a server environment. As
I understand it, that is where you need the key. All I know is that I export
ym Selfcert, import it on the other PC, and it works.

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

Thanks for the pointer to that site.

I will look into this Kassie.

From your earlier reply to OP I thought your sending of the DS to another
computer was referring to a selfcert DS.

I guess you meant a commercial DS


Gord


On Wed, 16 Sep 2009 00:12:01 -0700, Kassie wrote:

While I have never used this info, have a look at the following site:
http://www.source-code.biz/snippets/vbasic/3.htm

Christian d'Heureuse suggests the use of makecert.exe, cert2spc.exe and
pvkimprt.exe to achieve this objective. These commands form part of the .NET
Framework and Platform SDK.




Gord Dibben

Code signing certificate
 
Please email a selfcert DS that you create so I may test on my computer.

Thanks


Gord

On Wed, 16 Sep 2009 11:35:01 -0700, Kassie wrote:

No, it was a selfcert DS, but have never worked on a server environment. As
I understand it, that is where you need the key. All I know is that I export
ym Selfcert, import it on the other PC, and it works.



kassie

Code signing certificate
 
That's a bit difficult, since e mails get rejected on your side, using the
email on your profile, iso replacing words with symbols, suc as DOT with . ?

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

Please email a selfcert DS that you create so I may test on my computer.

Thanks


Gord

On Wed, 16 Sep 2009 11:35:01 -0700, Kassie wrote:

No, it was a selfcert DS, but have never worked on a server environment. As
I understand it, that is where you need the key. All I know is that I export
ym Selfcert, import it on the other PC, and it works.




Gord Dibben

Code signing certificate
 
Replace AT with @

Replace DOT with .


Gord

On Thu, 17 Sep 2009 07:21:01 -0700, Kassie wrote:

That's a bit difficult, since e mails get rejected on your side, using the
email on your profile, iso replacing words with symbols, suc as DOT with . ?



kassie

Code signing certificate
 
That's what I did, but it was returned?

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

Replace AT with @

Replace DOT with .


Gord

On Thu, 17 Sep 2009 07:21:01 -0700, Kassie wrote:

That's a bit difficult, since e mails get rejected on your side, using the
email on your profile, iso replacing words with symbols, suc as DOT with . ?




Gord Dibben

Code signing certificate
 
gorddibbATshawDOTca

Sorry to be such a pest Kassie


Gord


On Thu, 17 Sep 2009 10:56:09 -0700, Kassie wrote:

That's what I did, but it was returned?



kassie

Code signing certificate
 
I used that address, I changed the AT to @, and the DOT to ., but it was
returned as undeliverable, Gord. I think your server is rejecting the
attachment if you ask me. Send me your private email address to the one in
my profile, and maybe we can then get there?

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

gorddibbATshawDOTca

Sorry to be such a pest Kassie


Gord


On Thu, 17 Sep 2009 10:56:09 -0700, Kassie wrote:

That's what I did, but it was returned?




Rich/rerat

Code signing certificate
 
Kassie,
You may need to Zip file the attachment first?

--
Add MS to your News Reader: news://msnews.microsoft.com
Rich/rerat
(RRR News) <message rule
<<Previous Text Snipped to Save Bandwidth When Appropriate


"Kassie" wrote in message
...
I used that address, I changed the AT to @, and the DOT to ., but it was
returned as undeliverable, Gord. I think your server is rejecting the
attachment if you ask me. Send me your private email address to the one in
my profile, and maybe we can then get there?

--
HTH

Kassie

Replace xxx with hotmail


"Gord Dibben" wrote:

gorddibbATshawDOTca

Sorry to be such a pest Kassie


Gord


On Thu, 17 Sep 2009 10:56:09 -0700, Kassie
wrote:

That's what I did, but it was returned?







All times are GMT +1. The time now is 09:26 AM.

Powered by vBulletin® Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
ExcelBanter.com