install4j的代码签名错误 [英] code signing error with install4j

问题描述

当我尝试使用p12密钥库对exe签名时，出现以下错误:

When I try to sign my exe using a p12 keystore I get the following error:

codesigning.p12不包含完整的证书链

codesigning.p12 does not contain the complete certificate chain

但是，我可以执行以下操作使用Windows signTool.exe对其进行签名:

However, I can sign it without problem using the windows signTool.exe by executing:

signtool登录/f codesigning.p12/p $ keyStorePassword myprogram.exe

signtool sign /f codesigning.p12 /p $keyStorePassword myprogram.exe

有什么想法如何使它在install4j中工作?

Any ideas how to get this working in install4j?

推荐答案

signtool可以访问Windows密钥库中的中间证书，而install4j则不能.

signtool can access intermediate certificates in the Windows keystore, something that install4j does not do.

除了创建独立的证书外(请参见添加中间证书证书保存到pkcs12文件)，则可以使用媒体向导的可执行处理"步骤并调用

Other than creating a self-contained certificate (see Adding an intermediate certificates to a pkcs12 file), you can use the "Executable processing" step of the media wizard and call

C:\Path\To\signtool sign /f codesigning.p12 /p $keyStorePassword $EXECUTABLE

对所有可执行文件执行外部签名.

to perform external signing of all executables.

这篇关于install4j的代码签名错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！