How to Code Signing VB6 MS Authenticode???

[QBTeKCom]

Happy New Year!
I need to have a VB6 program (exe) digitally signed. Verisign said to use SignCode.exe from some MS SDK but I cannot find anything about VB6 and SignCode. A lot about VB.net but no VB6.

Can anyone tell me if I can do it, how to do it, where to get the signcode.exe?

Help!

Thanks!

Jack
qbtekcom at yahoo com

 

[BobRodes]

Here's some info:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/VBRef98/html/vbmscLROverview.asp

Also, signcode.exe is on your VB6 disk, as part of the ActiveX SDK.

Bob

 

[QBTeKCom]

Thanks Bob but when I follow the link I get the below. If I click on 'See also' I get nothing but a note on the bottom 'error in page' on both MSIE 6 and 7. (IE 7 even has junk on the top). Even tried with FireFox.

I search the program files hard drive and Visual Studio 6 Enterprise CDs 1,2,3 and could not find CodeSign*

When going into MS download center I come up with more broken links. Just getting nowhere. Could not find a single place to download SignCode or ActiveX SDK. I need a specific link or something.

From the above link
Reference
See Also

The contents of the Visual Basic Language Reference and Controls Reference includes topics on the controls, objects, properties, methods, events, statements, functions, and constants available.

Additionally, this Reference contains topics on wizards, trappable errors, data types, keyboard shortcuts, and bi-directional programming.


Jack
qbtekcom at yahoo com

 

[BobRodes]

Well, I don't think I could find CodeSign* either. Er...try looking for SignCode* instead? I believe it's in a /bin directory.

 

[QBTeKCom]

Well I found it. It is of course Old (1998). I can't find a newer one on the web. When reviewing the Code Signing products they all say that you need the MS Internet SDK. Each Cert Authority seems to use different terminology for this SDK. Some say the INETSDK. But when I go the the MS download center INETSDK cannot be found and "Internet SDK" results in 9 hits and none seem to match.

Any ideas?



Jack
qbtekcom at yahoo com

 

[dilettante]

One way to proceed may be to use CAPICOM. The toolkit includes samples including a VB6 program that uses CAPICOM to sign codefiles.

If you have the Windows Platform SDK you'll find CAPICOM and documentation on CAPICOM there, otherwise you can use the MSDN Library Online for some information.

CAPICOM Reference

Download CAPICOM:

Platform SDK Redistributable: CAPICOM

Note Beginning with Windows Vista, CAPICOM is no longer supported. On these platforms, you should use the Certificate Enrollment API or the .NET Framework to implement security features.

All part of the phaseout of COM I suppose, but the API can be used with a little more pain. It just means you'll want to do your Vista builds on XP, or at least your code-signing and possibly your MSI installer builds on XP.

You might want to look into ordering a Platform SDK CD while you can still get one that hasn't started phasing out old documentation and tools. I keep a July 2002 edition handy because it was the last one to support Windows 95, and April 2005 because it is good through Win2003 SP1. These usually cost $5 to $10 U.S. for shipping.

Microsoft® Windows® and Platform SDKs (N. America?)

Hmm, I see there are 2 new ones. Oh well, maybe in a year.