如何获得一个值得信赖/验证出版商?出版商、如何获得、值得信赖

2023-09-03 02:45:12 作者:笔端有风月

当我开始我的具有管理权限的应用程序(右键单击该EXE |以管理员身份运行),用橙色或黄色横幅UAC对话框出现的警告发布者是未知的。证书购买相反,我想不同的方法来做它。我认为必须有可能实现,如果没有购买证书。基本上,我想要的外观和感觉,当我开始,例如,CALC.EXE(计算器在Windows中)具有管理权限。我有哪些选项或备选方案?

When I start my application with administrative permissions (right click on the EXE | Run as administrator), the UAC dialog with an orange or yellow banner appears with the warning that the publisher is unknown. Instead of purchase a certificate, I would like to do it differently. I think there must be possibilities to accomplish that without a purchased certificate. Basically, I want the look and feel when I start, for example, the calc.exe (Calculator in Windows) with administrative permissions. Which options or alternatives do I have?

推荐答案

无!

有关被称为发布者,你的应用程序必须具有数字签名,用于签名必须是可信证书。唯一的可能实现的是从一个知名的认证机构购买一个数字证书。

For the publisher to be known, you application must have a digital signature and the certificate used to sign it must be trusted. The only possibility to achieve it is to buy a digital certificate from a well-known certificate authority.

数字签名也应该包含时间戳。它会继续即使在证书过期您的应用程序的信任。如果有对数字签名没有时间戳,如证书到期的应用程序将变得不可信再次尽快。

The digital signature should also contain timestamp. It will keep your application trusted even when the certificate expires. If there's no timestamp on the digital signature, the application will become untrusted again as soon as the certificate expires.

您可以创建自签名数字证书,并与它自己的应用签名。但它不会被信任。有一个解决方法:如果用户将此证书安装到的受信任的根证书颁发机构或受信任的发布的,那么只有到那时你的应用程序将成为值得信赖的,并且UAC提示将​​有蓝色的背景,而不是黄色。但它要求用户明确EX preSS信任你的数字证书。

You can create a self-signed digital certificate and sign your application with it. But it won't be trusted. There's a workaround: if users install this certificate into Trusted Root Certificate Authorities or Trusted Publishers, then and only then your application will become trusted, and UAC prompt would have blue background instead of yellow. But it requires users to explicitly express trust to your digital certificate.

所以,需要从用户的任何步骤唯一的解决办法就是购买一个数字证书。

So the only solution that requires no steps from the users is to buy a digital certificate.