coapp-developers team mailing list archive

[Garrett Serack <garretts@xxxxxxxxxxxxx>]

Local usage doesn't require signing.

But distribution will.



Garrett Serack | Open Source Software Developer | Microsoft Corporation 
I don't make the software you use; I make the software you use better on Windows.


-----Original Message-----
From: Nico Rieck [mailto:nico.rieck@xxxxxxxxxxxxxx] 
Sent: Tuesday, April 13, 2010 6:19 AM
To: Adam Baxter
Cc: Garrett Serack; coapp-developers@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Coapp-developers] Let's talk about libraries

On 13.04.2010 10:12, Adam Baxter wrote:
>> In order to use WinSXS however, all binaries must be signed with an
> Authenticode code-signing certificate, from a reputable CA (certifying 
> authority).
> 
> This is automatically a major roadblock for many open source projects.

It's possible to install assemblies into WinSXS with a self-created certificate. At least that's what I did when I played with putting some libraries (I believe it was OpenSSL) into WinSXS some time ago.
Maybe this could be used when building from source locally.