如何签署 ClickOnce 应用程序 [英] How to sign a ClickOnce application

问题描述

我有一个为客户构建的 ClickOnce 应用程序，我需要它来自受信任的发布者.我如何获取 Authenticode 证书并用它签署我的应用程序?这样当应用程序启动时，它来自受信任的发布者?

I have a ClickOnce application that I built for a client, and I need it to be from a trusted publisher. How do I go about acquiring an Authenticode certificate and sign my application with it? So that when the application is launched, it's from a trusted publisher?

如何安装证书?我是否必须将它安装在我的开发服务器上，或者我在哪里安装它有关系吗?

How do I install the certificate? Do I have to install it on my development server or does it matter where I install it?

整个过程是如何进行的?不想花3-500美元买个证书，安装错了就倒霉了.

How does the whole process work? I don't want to spend 3-5 hundred dollars on a certificate, and install something wrong and be out of luck.

是否有关于购买和安装证书以及签署 ClickOnce 应用程序的好的教程?

Are there good tutorials on purchasing and installing a certificate and signing a ClickOnce application?

推荐答案

我最近经历了这个过程.证书并不那么昂贵 - 我们以不到 100 美元的价格获得了代码签名证书.

I recently went through this process. A certificate is not that expensive - we got a code-signing certificate for less than a $100.

获得证书后，请按照常见问题解答HOWTO:代码签名操作方法* 签署您的代码(二进制文件).

After you have the certificate, follow the FAQ HOWTO: Code signing how-to* to sign your code (binaries).

之后，你必须去项目属性->在那里签名并上传您的证书(用于 ClickOnce).不过，您可以跳过代码签名，只对 ClickOnce 进行签名.

After that, you have to go to project properties -> Signing and upload your certificate there as well (it's for ClickOnce). You can skip code signing though and sign ClickOnce only.

ClickOnce 需要代码签名证书，其他的不起作用，请参阅ClickOnce 部署和验证码:

ClickOnce requires a certificate for code signing, and others will not work, see ClickOnce Deployment and Authenticode:

对于 ClickOnce 应用程序，您必须拥有 Authenticode 证书这对代码签名有效；如果您尝试签署 ClickOnce带有其他类型证书的应用程序，例如数字电子邮件证书，它不会工作.

For ClickOnce applications, you must have an Authenticode certificate that is valid for code signing; if you attempt to sign a ClickOnce application with another type of certificate, such as a digital e-mail certificate, it will not work.

18 年 1 月更新:StartSSL 不再受信任， 我没有找到任何免费的(或类似于 StartSSL 提供的)代码签名证书.最终，我选择了 ksoftware.net - Comodo 代码签名证书每年 84 美元(但您需要有 DUNS 记录供他们检查！)

Jan'18 UPDATE: StartSSL is not trusted anymore, and I did NOT find any free (or similar to what StartSSL was offering) code signing certificates. At the end of the day, I went with ksoftware.net - $84/year for Comodo code-signing certificate (but you need to have DUNS record available for them to check!)

这篇关于如何签署 ClickOnce 应用程序的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！