maria-discuss team mailing list archive

[Vladislav Vaintroub <vvaintroub@xxxxxxxxx>]

On 19.01.2018 15:01, Peter Laursen wrote:
> A small observation that may help. I noticed that the certificate has 
> listed a "non-approved property". I checked a few other recent MariaDB 
> installers and they did not have any such "non-approved property".
>
> Please see image (that I hope explains what I am writing!). 
> ("Ikke-godkendte" in Dansih means "non-approved" in English).
This is "Unauthenticated attributes" in English Windows. I just 
downloaded 10.2.8 Win64 and  MSI  contains it as well. As I understand, 
this comes from timestamping (more info on that in 
https://msdn.microsoft.com/en-us/library/windows/desktop/bb931395(v=vs.85).aspx 
) , which we use together with signing, and it is nothing of concern.


> On Fri, Jan 19, 2018 at 2:17 PM, Peter Laursen 
> <peter_laursen@xxxxxxxxxx <mailto:peter_laursen@xxxxxxxxxx>> wrote:
>
>     I would translate the dialog like this (but on a system with an
>     English locale it may not be exactly like this).
>
>     "Windows Defender Smartscreen prevented an unknown app in
>     starting. You may possibly expose your system to a security risk,
>     if you are running this app".
>
>     On Fri, Jan 19, 2018 at 2:06 PM, Vladislav Vaintroub
>     <vvaintroub@xxxxxxxxx <mailto:vvaintroub@xxxxxxxxx>> wrote:
>
>         What does it say in plain English?
>
>         We did not forget to sign the package, and you can check that
>         by rightclicking on the MSI, Properties/Digital Signature,
>         check the single one  in the list, press “Detail”.
>
>         It will show that signature is OK.
>
>         However, we did change Authenticode certificate, because the
>         old one has expired yesterday.  The new certificate  is valid
>         until 23 Dec 2019 (you can also check that by clicking on
>         certificate details). I do not see what we’re doing wrong,
>          we’ll check.  Maybe the new certificate needs some reputation
>         score, I’m not sure about it.
>
>         Sent from Mail
>         <https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
>
>         *From: *Peter Laursen <mailto:peter_laursen@xxxxxxxxxx>
>         *Sent: *Friday, January 19, 2018 1:41 PM
>         *To: *Maria Discuss <mailto:maria-discuss@xxxxxxxxxxxxxxxxxxx>
>         *Subject: *[Maria-discuss] MariaDB 10.3.4 installation blocked
>         ny MS "WindowsDefender" malware protection
>
>         Please see image. (you can clik "more info" adn the option to
>         "install anyway" will appear.
>
>         Did you forget to sign the installer this time or has some
>         certificate expired?
>
>         -- Peter
>
>         -- Webog