通过ClickOnce使用EV证书 [英] Using EV Certificate With ClickOnce

问题描述

我的公司从Symantec购买了EV证书，以用于我们生产的软件产品.具体来说，它称为: Symantec Class 3扩展验证码签名CA – G2 .

My company purchased an EV Certificate from Symantec to use for a software product we produce. Specifically it is called: Symantec Class 3 Extended Validation Code Signing CA – G2.

要开发和构建此产品，我们使用Visual Studio 2013，并使用ClickOnce作为发布和安装程序机制.我们遇到的问题是，ClickOnce无法使用其内置的签名机制来应用EV证书. ClickOnce可以很好地查看证书，并允许我们使用从商店中选择..."按钮进行选择.它在证书"窗口中显示所有正确的信息.但是当我们发布时会遇到以下错误:

To develop and build this product we use Visual Studio 2013, and we use ClickOnce as the publish and installer mechanism. The problem we are having is that ClickOnce is unable to apply the EV Certificate using it’s built-in signing mechansim. ClickOnce can see the Certificate just fine, and allows us to select it with the "Select from Store…" button. It shows all of the correct information in the Certificate window. But when we Publish the following error is encountered:

""签名时发生错误:无法签名bin \ Release \ app.publish \ setup.exe. SignTool错误:发生了意外的内部错误."

请注意，我们能够使用SignTool.exe从命令行应用EV证书，因此问题不在于该程序.

Note that we are able to use SignTool.exe to apply the EV Certificate from the command line, so the problem is not with that program.

有人对EV证书和ClickOnce的组合有经验吗?我们应该购买另一种可以与ClickOnce搭配使用的EV证书吗?

Has anyone had experience with this combination of EV Certificate and ClickOnce? Is there a different EV Certificate that we should buy that works better with ClickOnce?

推荐答案

几天前，我遇到了完全相同的问题，而Digicert售后服务已经能够解决它.尝试检查此注册码的值(在regedit中):

I had the exact same problem a few days ago and the Digicert after-sales service has been able to to solve it. Try to check the value of this register key (in regedit):

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Cryptography/Providers/SafeNet智能卡密钥存储提供程序/别名

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Cryptography/Providers/SafeNet Smart Card Key Storage Provider/Aliases

该值应为"eToken基本密码提供程序"，而不是"eToken基本密码提供程序"("p"而不是"c").

The value should be "eToken Base Cryptographic Provider" and not "eToken Base Cryctographic Provider" ('p' instead of 'c').

如评论中所述，更改后必须重新启动.

As said in the comments, you'll have to reboot after that change.

希望有帮助.

这篇关于通过ClickOnce使用EV证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！