tigergrace
Level 6

warning information when sign package

Hello,

When I signed my setup.exe with my digital certificate file *.pfx, it will give me some warning message like "A warning occurred while signing 12E.tmp", and then I was looking for build message, I find sign error: "SignTool Error: An error occurred while attempting to timestamp: certificate.msi".

My version is IS2011, does anyone know the reason? because the same digital certificate .pfx file works for the other person.

Thanks,
grace
Labels (1)
0 Kudos
8 Replies
Kike_Izquierdo
Level 4

For the timestamp you need access to the website of the your digital certificate.
have you signed other files without use InstallShield?
0 Kudos
tigergrace
Level 6

Hello,

Thanks for your quick response.

Could you plealse let me know which website I need permisstion? Is like below:
http://timestamp.verisign.com/scripts/timstamp.dll
I can not access the link above. please let me know if it is not.How can I get the access.

I did not sign any files without IS2011

Thanks a lot,:)
grace
0 Kudos
Kike_Izquierdo
Level 4

You need access to Internet from you local or built machine.
Do you use proxy server?

You can sign files with tool signtool.
Command:
signtool.exe sign /v /f /p /t http://timestamp.verisign.com/scripts/timstamp.dll FileNameToSign
0 Kudos
tigergrace
Level 6

Hello Kike,

I am sure I have access to internet. in my PC, I did not use any proxy, but I am not sure the company whether to have.

I want to use IS2011 sign automatically, because we have lots of tools, it is not a good idear to sign manually.

Do you have any more sugestion?

Thanks a lot
grace
0 Kudos
MichaelU
Level 12 Flexeran
Level 12 Flexeran

If the signtool command Kike posted works manually, it should also work when called from InstallShield automatically. If it does not, you can cross-reference with the DigitalSignature element in settings.xml (\Support\0409) and get access to the server, or use an alternate one.
0 Kudos
tigergrace
Level 6

Hello MichaelU,

When I tried to use signtool.exe sign /v /f /p /t http://timestamp.verisign.com/scripts/timstamp.dll FileNameToSign to sign manually, it will give error message "The system cannot find the file specified." I replace the .pfx, password and my setup.exe file for the command, it still does not work.

what's your mean about cross-reference, use another server to replace http://timestamp.verisign.com/scripts/timstamp.dll in setting.xml file. could you please supply a new one if it is.

Thanks a lot,
grace
0 Kudos
Kike_Izquierdo
Level 4

You try with
<path>\signtool.exe sign /v /f <path\FileName.pfx> /p /t http://timestamp.verisign.com/scripts/timstamp.dll <path>\FileNameToSign
0 Kudos
tigergrace
Level 6

Kike,

Thanks much for your help. I am on vacation these days.

Here is what I get when sign manually The specified timestamp server could not be reached.. The same .pfx can work for my colleague who works in USA, there no any error genereated.

you may see the screenshot below. Hopefully this can help to solve the problem.


Much Thanks,

grace
0 Kudos