为什么我仍然看到带有 UAC 提示的未知发布者? [英] Why do I still see publisher unknown with the UAC prompt?

问题描述

我已经制作了自己的 CA，然后是 .pfx 文件.我正在使用 Wix 工具集来构建安装程序.

I have made my own CA and then .pfx file. I am using the Wix Toolset to build the installer.

在 wix 项目文件中，我使用以下内容对其进行了编辑；

In the wix project file I have edited it with the following;

<PropertyGroup>
    <SignOutput>true</SignOutput>
</PropertyGroup> 

<PropertyGroup>
    <sourceRoot>$(OutputPath)..\..</sourceRoot>
</PropertyGroup>


<Target Name="SignMsi">
     <Exec Command='"$(sourceRoot)\Keys\signtool.exe" sign /v /f "$(sourceRoot)\Keys\myCA.pfx" /t http://timestamp.verisign.com/scripts/timstamp.dll /v /d "%(SignMsi.Filename)" "@(SignMsi)"' />
</Target>

<Target Name="SignCabs">
    <Exec Command='"$(sourceRoot)\Keys\signtool.exe" sign /v /f "$(sourceRoot)\Keys\myCA.pfx" /t http://timestamp.verisign.com/scripts/timstamp.dll /v /d "%(SignCabs.Filename)" "@(SignCabs)"' />
</Target>

然后我在 Visual Studio 中构建它并成功构建，甚至签名表演也成功.

I then build it in Visual Studio and it builds successfully and even the signing show success.

然而，在 UAC propmpt 上，它仍然是发布者未知的.

However at the UAC propmpt it is still publisher unknown.

推荐答案

我想自己回答这个问题，因为我认为这里有一些非常大的误解.您可以制作自己的证书并将其添加到您自己的商店，然后 UAC 将变为蓝色/绿色并显示发布者.100% 信任.当然关键是你制作的CA证书必须在商店里.这是导致部署问题的一点，但我希望如果我将我的证书带到其他计算机，我可以将它添加到商店，然后我将显示为发布者.

I want to answer this question myself as I think there is some pretty huge misunderstandings here. You can make your own certificate and add it to your own store and then the UAC will be blue/green and the publisher will be shown. 100% trust. Of course the key is that the CA certificate you made has to be in the store. This is the bit that causes the problem for deployment, but I hope that if I take my certificate along to other computers I can add it to the store and then I will be shown as the publisher.

我的证书有一些问题需要修复.我知道我在使用时遇到了问题

I had a few issues with my certificate which I needed to fix. I knew I had issues by using

signtool verify /v /pa mysigned.exe

这告诉我事情不正确以及需要修复什么.

This told me that things were not correct and what to fix.

这篇关于为什么我仍然看到带有 UAC 提示的未知发布者?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！