zim-wiki team mailing list archive

[Brendan Kidwell <brendan@xxxxxxxxx>]

On Mon, May 8, 2017, at 23:15, Marcio Tibirica wrote:
> In both scans no trace of infection was found, but if I try to run the 
> installer it is blocked by Windows Defender which informs the following:
> Application: ZimDesktopWikiPortable_0.66.paf.exe
> Supplier: Unknown Supplier
>
> Maybe it is just a case of registering the software supplier in MS 
> database? Or, maybe some information that must be embedded in the 
> package? I don't know how this work.

I have only ever signed the installer packages using GPG as a separate
file. I have never enclosed a signature and x.509 code signing
certificate in the executable file itself. As far as I know, it still
costs money to acquire an x.509 certificate suitable for signing Windows
executables. "Supplier: Unknown Supplier" has little to do with virus
scans. Windows is saying that the package's publisher is unidentified,
and it really is unidentified.

> By the way, who is going to take over Windows package creation for next 
> Zim release?

Unknown, at this time.