Re: [Algorithms] Timing problems

[Konstantin M. <co...@ix...>]

Hi folks,

Comodo Code Signing CA2 certificate could be used for code signing only.
just run certmgr.msc and look at properties.
Comodo cert is signed by UTN_USERFirst cert. the later one does not support 
kernel mode code signing as well.
and only the parental AddTrust Ext CA Root cert has kmcs bit enabled.
So, COMODO  does not provide certs for kmcs (sys drivers).
AFAIK the only CAs provide kmcs are Symantec/VeriSign and GlobalSign. and 
their partners/franchise of course.


-km

----- Original Message ----- 
From: "Robert Walker" <fo...@ro...>
To: <GDA...@li...>
Sent: Friday, March 22, 2013 3:24 PM
Subject: Re: [Algorithms] Timing problems


> Hi Jan,
>
> I've got a Comodo code signing certificate renewed every year for my 
> application
> installer signing.
>
> Just tested it on one of the .sys files for 0.A.D. and it signed it 
> successfully
> and it says it is digitally signed when I right click on properties.
>
> Not sure how to test to see if the certificate I used is enough to let it 
> be
> installed okay.
>
> I'm running Windows 7 64 bit here though, so ideal for testing if it does
> install okay if you can tell me what to do to test that.
>
> Presumably once installed then the application doesn't need to be run with 
> admin
> privileges to access it?
>
> Yes it is absolutely fine if it is read only for apps like mine that only 
> need
> to read the HPET counter.
>
> Yes I'm happy to work together with you on this if it is something I have 
> the
> ability to do and if I can find the time to do it. If it is something that 
> can
> be done in a few days of work then I can surely find the time for it one 
> way or
> another. Longer projects can be harder to find time for.
>
> I have no experience of writing drivers though, also don't use c++, I 
> write in
> low level Windows C most of the time. But if it is just a case of removing
> functionality and recompiling maybe it is something I can do?
>
> I use Visual C++ 6.0 for my programming which is probably not new enough 
> for
> this? I use the Visual Studio family of free compilers as well, but only 
> for
> debugging from time to time to take advantage of a few debug capabilities 
> they
> have that aren't in Visual C++ 6.0.
>
> Simplest though is just to code sign the existing version if that works, 
> for
> now. I don't really see how it is going to be a risk because to access the
> driver - wouldn't an application have to be installed on your computer 
> anyway?
> Which means that the user has given it admin permissions to install 
> whatever it
> likes anyway, and if it does something malicious, surely it would do it 
> directly
> and e.g. install a known virus or spyware, rather than try to access a 
> driver to
> address the HPET counter? Or am I missing something there?
>
> Though advantage if there is one less thing for the user to have to accept
> during install.
>
> Also, how do you use it? I've never installed a driver or interfaced 
> directly
> with a driver. Is there example code in the zip?
>
> Thanks,
>
> Robert
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_mar
> _______________________________________________
> GDAlgorithms-list mailing list
> GDA...@li...
> https://lists.sourceforge.net/lists/listinfo/gdalgorithms-list
> Archives:
> http://sourceforge.net/mailarchive/forum.php?forum_name=gdalgorithms-list
>