“适当"发行软件并为其创建安装程序的方式 [英] "Proper" way of releasing software and creating an installer for it
问题描述
让我们假设我刚刚在Visual Studio中创建了一个应用程序，现在我想分发它.我已将应用程序设置为发布模式，并且我有一个可以正常运行的应用程序副本.我的主要问题是如何为它创建安装程序并确保Windows知道它是可信任的?我必须创建某种证书吗?
Let's suppose I've just created an app in visual studio and now I want to distribute it. I've set the app to release mode and I have a copy of the app that works just fine. My main question is how would I go about creating an installer for it and making sure Windows knows it's trustworthy? Do I have to create some sort of certificate?
我一直在搜索和下载NSIS，但是我不确定如何使用它，所以我只使用了Inno Setup Compiler，它工作得很好.有时Avast会检查我的应用程序，大约需要5到10秒钟才能打开它，但其他应用程序则不会.
I've been searching and downloaded NSIS but I'm not sure how to use it so I just used Inno Setup Compiler which works just fine. Sometimes Avast checks my application and takes about 5 or 10 seconds before opening it but that doesn't happen with other applications.
avast是否有问题?
Is that a problem with avast?
推荐答案
部署工具 : installsite.org 的链接显示了 WiX (开源， Advanced Installer (很棒的工具，很多聪明的人)， Installshield (市场领导者)等.看看.
Deployment Tool: Here is a piece on common MSI tools, and links to other, non-MSI deployment tools. The links to Stefan Kruger's site installsite.org shows the full list of available tools for MSI and non-MSI. The most common tools are: WiX (open source, learning curve - hints here), Advanced Installer (great tool, lots of smarts), Installshield (market leader), and others. Have a look.
SmartScreen :Windows现在具有"SmartScreen"功能-这是一个基于信任的系统，您的二进制文件必须通过使用来赢得声誉".基本上，您需要购买 Extended Validation Certificate 来完全信任"(有趣的概念……谁闻到球拍的味道?):
SmartScreen: Windows now features "SmartScreen" - which is a trust based system where your binaries have to "earn reputation" through use. Essentially you need to buy a Extended Validation Certificate to "buy trust" outright (Interesting concept... Who smells a racket?):
- How to add publisher in Installshield 2018 (About the certificate: EV code-signing certificate)
- How to pass the Windows Defender SmartScreen Protection?
VirusTotal.com :我喜欢将我的二进制文件上传到 VirusTotal.com .他们使用大量恶意软件扫描程序检查二进制文件，您可以查看是否有任何扫描程序将您的二进制文件标记为可疑文件.重要的一步是检查发布文件中的真正的恶意软件(发生)，并且(同样重要的是)检查误报-否则会引起用户问题还有很多支持电话.
VirusTotal.com: I like to upload my binaries to VirusTotal.com. They check the binaries with a plethora of malware scanners and you can see if any scanners flag your binaries as suspicious. An important step to check both for genuine malware in your release files (happens), and also - and just as importantly - for false positives - that would otherwise cause your users problems and you a lot of support calls.
信誉 :请注意，我不确定上载是否有助于提高SmartScreen的二进制信誉.我不认为这样做-至少不是很快.您需要 EV code-signing certificate 才能购买信任"规模分布.我应该补充说，对此类证书的审核和批准涉及到验证公司的存在(如普通证书)，而且还包括加密狗或硬件密钥(我认为)，因此相当麻烦，因此可以证明"分销商必须至少组织得井井有条.
Reputation: Note that I am not sure whether uploading helps with the binaries reputation for SmartScreen. I don't think it does - at least not in a quick way. You need an EV code-signing certificate to "buy trust" for large scale distributions. I should add that the vetting and approval for such certificates involve verifying the company's existence (like normal certificates), but also dongles or hardware keys - I think - and hence is quite a bit of fuss to get, and hence does "prove" that the distributor must at least be well-organized.
链接 :
Links:
- Installshield Custom Dialogue Installer
- How to avoid the "Windows Defender SmartScreen prevented an unrecognized app from starting warning"
这篇关于“适当"发行软件并为其创建安装程序的方式的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
