ClickOnce应用程序安装 - 安全警告 [英] ClickOnce Application Install - Security Warning

问题描述

我有一个在网站上部署的点击应用程序（例如，）：

当用户的桌面上启动ClickOnce应用程序
第一次，.NET Framework运行时将首先检查以确保
的应用程序清单没有被篡改，因为它们是用任何发行者证书用于签名的
签名的。如果
他们通过该检查，运行时将查看Trusted Root
证书颁发机构存储，并查看发布商证书的
颁发者的证书是否安装在该存储中。然后，
将查看证书上的发行者是谁，并查看
他们的证书是否在Trusted Publishers存储中。 如果这两个
的事情是真的，那么默认情况下 ，用户将不会被提示，而
将授予应用程序任何特权指定的权限
应用程序清单文件。

只要最终用户没有修改他的通知设置， t显示。

I have a clickonce application that is deployed on the website (say, http://example.com) and users will download the setup.exe file of my published application from that website and install the application on their computer.

I have signed the ClickOnce manifests of my application with the Certificate issued by GoDaddy for my company.

But, the User still get the following Application Security Warning when they try to install my application. Is there a way around so that this security warning will not be shown at all?

Any help will be appreciated.

解决方案

Well, you have to follow the steps in the MSDN-library (source):

When a ClickOnce application is being launched on a user's desktop the first time, the .NET Framework runtime will first check to ensure that the application manifests have not been tampered with since they were signed with whatever publisher certificate was used for signing. If they pass that check, the runtime will then look into the Trusted Root Certification Authority store and see if the certificate for the issuer of the publisher's certificate is installed in that store. It will then look at who the publisher on the certificate is, and see if their certificate is in the Trusted Publishers store. If those two things are true, then by default the user will not be prompted, and the application will be granted whatever privileges are specified in the application manifest file.

As long as the end user hasn't modified his notification settings, the prompt won't show up.

这篇关于ClickOnce应用程序安装 - 安全警告的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！