Windows 7+上的Inno exe签名极慢 [英] Signed inno exe extremely slow on windows 7+

问题描述

我发现，在某些情况下，我已签名但未创建的installer.exe大约需要10分钟才能打开或查看属性.当我以管理员身份运行时，它是立竿见影的，因此很明显，UAC某种程度上是相关的. exe的大小约为13 MB.

I find that under certain conditions my signed, inno created installer.exe takes about 10 minutes to open or view properties. When I run as administrator it is immediate, so it seems obvious that the UAC is somehow related. The size of the exe is around 13 MB.

如果我通过拇指驱动器将文件复制到目标计算机，则无需等待.如果通过浏览器下载了相同的文件，则需要等待10分钟，资源管理器进入la la laland，谁知道.等待大约10分钟后，文件将正常打开，而无需等待所有后续打开.

If I copy the file via thumb drive to the target machine, there is no wait. If the same file is downloaded through a browser, there is the 10 minute wait, with explorer going into la la land doing who knows what. After the 10 minute or so wait, the file opens normally with no wait on all subsequent openings.

尽管我认为这不是一个因素，但我正在使用ksign + commodo对inno exe和inno设置中的内部dotnet exe进行签名.

I am using ksign + commodo to sign the inno exe, and an internal dotnet exe within the inno setup, although I don't think that is a factor.

Windows 10即使以管理员身份运行也要等待10分钟.

Windows 10 has the 10 minute wait even running as administrator.

从Win 7开始，大多数版本都会执行此操作.触发它的exe内容似乎有所变化，但我没有找到原因.

This action is happening for most versions from win 7 on up. There seems to be some change in the exe contents that triggered it, but I haven't found the reason.

我以前联系过ksign，他们似乎对我的exe没有任何问题，它在打开时没有滞后于他们的环境.但是，这并不常见，因为许多安装都面临此滞后问题.我还尝试从过程监视器监视资源管理器中了解一些信息，但是资源管理器中包含的信息太多，无法选择挂起的过程，除非我在错误的位置查看.

Edit 1: I previously contacted ksign, they don't seem to have any issues with my exe, it opens without lag in their environment. This isn't typical however, as many installations face this lag issue. I also tried making some sense out of process monitor monitoring explorer, but there is too much information going on with explorer to pick out the hanging process, unless I a looking in the wrong place.

MsMpEng.exe(它是Microsoft安全必备)，似乎运行正常.

Edit 2: MsMpEng.exe, which is microsoft security essentials, seems to running amok. This goes on almost endlessly.

推荐答案

尝试此处介绍的步骤:

Try steps described here: Offline Environment and Authenticode:

要与支持UAC的Windows一起使用，winsw附带了数字 签名.这将导致Windows自动验证此数字 启动应用程序时签名(请参阅更多 讨论). 这会增加服务启动的延迟，甚至更多 重要的是，它可以防止winsw在没有配置的服务器上运行 网络连接.这是因为签名的一部分 验证涉及检查证书吊销列表.

To work with UAC-enabled Windows, winsw ships with a digital signature. This causes Windows to automatically verify this digital signature when the application is launched (see more discussions). This adds some delay to the launch of the service, and more importantly, it prevents winsw from running in a server that has no internet connection. This is because a part of the signature verification involves checking certificate revocation list.

为避免此问题，请在同一位置创建myapp.exe.config 目录为myapp.exe(重命名为winsw.exe)，然后输入以下内容 在其中:

To prevent this problem, create myapp.exe.config in the same directory as myapp.exe (renamed winsw.exe) and put the following in it:

<configuration>
  <runtime>
    <generatePublisherEvidence enabled="false"/> 
  </runtime>
</configuration>

有关更多信息，请参见 KB 936707 详细信息.

See KB 936707 for more details.

请注意，如果您的安装程序已经嵌入了清单(更多详细信息).在这种情况下，您应该尝试修改嵌入式清单.

Note, this may not work, if your installer already has embedded manifest (more details). In this case you should try to modify your embedded manifest instead.

这篇关于Windows 7+上的Inno exe签名极慢的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！