← Back to team overview

maria-discuss team mailing list archive

Re: MariaDB 10.3.4 installation blocked ny MS "WindowsDefender" malware protection


On 19.01.2018 15:01, Peter Laursen wrote:
A small observation that may help. I noticed that the certificate has listed a "non-approved property". I checked a few other recent MariaDB installers and they did not have any such "non-approved property".

Please see image (that I hope explains what I am writing!). ("Ikke-godkendte" in Dansih means "non-approved" in English).

This is "Unauthenticated attributes" in English Windows. I just downloaded 10.2.8 Win64 and  MSI  contains it as well. As I understand, this comes from timestamping (more info on that in https://msdn.microsoft.com/en-us/library/windows/desktop/bb931395(v=vs.85).aspx ) , which we use together with signing, and it is nothing of concern.

On Fri, Jan 19, 2018 at 2:17 PM, Peter Laursen <peter_laursen@xxxxxxxxxx <mailto:peter_laursen@xxxxxxxxxx>> wrote:

    I would translate the dialog like this (but on a system with an
    English locale it may not be exactly like this).

    "Windows Defender Smartscreen prevented an unknown app in
    starting. You may possibly expose your system to a security risk,
    if you are running this app".

    On Fri, Jan 19, 2018 at 2:06 PM, Vladislav Vaintroub
    <vvaintroub@xxxxxxxxx <mailto:vvaintroub@xxxxxxxxx>> wrote:

        What does it say in plain English?

        We did not forget to sign the package, and you can check that
        by rightclicking on the MSI, Properties/Digital Signature,
        check the single one  in the list, press “Detail”.

        It will show that signature is OK.

        However, we did change Authenticode certificate, because the
        old one has expired yesterday.  The new certificate  is valid
        until 23 Dec 2019 (you can also check that by clicking on
        certificate details). I do not see what we’re doing wrong,
         we’ll check.  Maybe the new certificate needs some reputation
        score, I’m not sure about it.

        Sent from Mail
        <https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10

        *From: *Peter Laursen <mailto:peter_laursen@xxxxxxxxxx>
        *Sent: *Friday, January 19, 2018 1:41 PM
        *To: *Maria Discuss <mailto:maria-discuss@xxxxxxxxxxxxxxxxxxx>
        *Subject: *[Maria-discuss] MariaDB 10.3.4 installation blocked
        ny MS "WindowsDefender" malware protection

        Please see image. (you can clik "more info" adn the option to
        "install anyway" will appear.

        Did you forget to sign the installer this time or has some
        certificate expired?

        -- Peter

        -- Webog