How to generate single signature for code signing and timestamp

Hi we are developing Win 7 VC++ app using Crypto APIs.
Here code signing is done using Cryptsignhash() method, that generates the signature. Later for time stamping CryptRetriveTimestamp() method is used which also generate the time stamp signature. Thus we wanted to know
whether there is any single Crypto API available that can do code signing and timestamping together and shall generate single signature. At verification side it should be also possible to separate code signing and timestamp signatures prior to verification.
Any help is highly appreciated. Thanks.

On 4/17/2015 1:21 AM, Babu12345 wrote:
*Hi we are developing Win 7 VC++ app using Crypto APIs. *
*Here code signing is done using Cryptsignhash() method, that generates the signature. Later for time stamping CryptRetriveTimestamp() method is used which also generate the time stamp signature. Thus we wanted to know whether there is any single Crypto API
available that can do code signing and timestamping together and shall generate single signature.
No. Normally, you don't counter-sign the actual data - you counter-sign and time stamp your signature. You don't want to transmit the whole data (which could be a) large and b) confidential) to a third party. This is why it's a two step process.
Igor Tandetnik

Similar Messages

  • Code signing and Timestamp Server Error

    Warning: I’ve got exactly 2 days experience with AIR
    but a client wants to add file IO capabilites to a
    touchscreen/Flash application we developed and AIR seems to be our
    only choice.
    From CS4 I can publish an AIR 1.5 application with a self
    signed code certificate but I get the error “Could not
    connect to timestamp server”, I can then disable the
    timestamp and get the warning: “If the AIR application is not
    timestamped, it will fail to install when the digital certificate
    expires. Are you sure you want to disable timestamping?” I
    can proceed without the timestamp and everything seems to work.
    So I’m wondering, when does my certificate expire? I
    think I might have read 5 years. What do my clients do if they have
    to reinstall the application after 5 years? Make them pay for
    another copy ;-) Lastly, how do I avoid the timestamp error? Sign
    up with a CA like VeriSign at $500/yr, not gonna happen for just
    one client.
    Sorry to sound a little testy but I could have written
    exactly the same application in Director and not had to worry about
    this code signing business.

    You need to have a network connection for timestamping to
    work. If that network connection uses a proxy server, you may also
    need to set up the JRE to use that proxy (See
    http://www.java.com/en/download/help/5000020600.xml).
    When the certificate expires, the AIR file can't be used
    anymore if there is no timestamp.
    A timestamp verifies that the certificate was valid when the
    AIR file was signed, so the AIR app can be installed even after the
    cert expires when a timestamp is present.
    Timestamps do not require a Verisign, or any other commercial
    certificate. The service is free.

  • How to get digital signature for Google Map geocoding V3 in PL/SQL?

    Hi, Gurus:
        Could anyone provide me an example about how to generate digital signature for Google Maps service v3 in PL/SQL? We tried to upgrade our program using Google maps service from v2 to v3. We are using PL/SQl on background to send request to Google for geocoding. We found some sample code to register with digital signature, but none of them is based on PL/SQl. Notice I used Google business client ID "gme-XXX" and wallet.
    https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
    Google Maps API - more URL signing samples
    Here is my code for V2. I notice in order to get signature, I need to use HMAC-SHA1 algorithm.
    procedure Get_Geocoding(P_s_Address in varchar2, P_s_Geocoding out varchar2, P_n_accuracy out number, P_b_success out boolean) is
      l_address varchar2(4000);
      l_url varchar2(32000);
      l_response varchar2(3200);
      n_first_comma number;
      n_second_comma number;
      n_level_length number;
    BEGIN
      /* TODO implementation required */
      l_address:=APEX_UTIL.URL_ENCODE(P_s_Address);
      l_address := replace(l_address,' ','+');
      l_url := 'http://maps.google.com/maps/geo?q='||l_address||'&'||'output=csv'||'&'||'client=gme-XXX';
    l_response := utl_http.request(l_url, APEX_APPLICATION.G_PROXY_SERVER, '/u02/app/oracle/admin/apexsb/wallet', 'XXXXXXXX');
      n_level_length:=0;
      n_first_comma:=instr(l_response,',',1,1);
      n_second_comma:=instr(l_response,',',1,2);
      n_level_length:=n_second_comma-n_first_comma-1;
      P_n_accuracy:=0;
      if n_level_length>0 then
      P_n_accuracy:=to_number(substr(l_response,n_first_comma+1, n_level_length));
      end if;
      l_response:=substr(l_response,instr(l_response,',',1,2)+1);
      --dbms_output.put_line('In function: l_response ='||l_response);
      P_s_Geocoding:=l_response;
      if (P_s_Geocoding<>'0,0') then
      P_b_success:=true;
      --dbms_output.put_line('true');
      else
      P_b_success:=false;
      --dbms_output.put_line('false');
      end if;
    END;
    Thanks!

    Hi, guys:
        I tried to generate digital signature for Google map service
         Maps for Business: Generating Valid Signatures - YouTube
        Generating an HMAC-SHA-1 Signature Using Only PL/SQL
          OAuth and the PL/SQL | Data Warehouse in the Cloud
       but I got error message from Google:
    Unable to authenticate the request. Provided 'signature' is not valid for the provided client ID. Learn more: https://developers.google.com/maps/documentation/business/webservices/auth
       I think there is something wrong with my code to generate signature, as if I remove the part regarding client and signature, it will work, can anyone help me on this problem?
    /*Procedure Get_Geocoding is used to get geocoding with accuracy level for V3 business account, you can find Google map digital signature descrirption from
    https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
    if geocoding is 0,0, procedure returns false to indicate failure of get geocoding*/
    procedure Get_Geocoding2(P_s_Address in varchar2, P_s_Geocoding out varchar2, P_n_accuracy out number, P_b_success out boolean) is
      --private key for Google business account, this is provided by Google with client name.
      l_private_key_src varchar2(200):='xxxxxxxxxxxxxxxxxxx';
      l_private_key_b64_alter varchar2(200):= translate(l_private_key_src,'-_','+/');
      l_private_key_bin raw(2000);
      l_client_name varchar2(100):='gme-xxx';
      l_signature_mac raw(2000);
      l_signature_b64 varchar2(200);
      l_signature_b64_alter_back varchar2(200);
      l_Google_service_domain varchar2(200):='http://maps.googleapis.com';
      l_address varchar2(4000);
      l_url varchar2(32000);
      l_path varchar2(32000);
      l_response varchar2(32000);
      l_page UTL_HTTP.HTML_PIECES;
      n_actual_length number;
      json_obj json;
      json_tempobj json;
      jl_listOfValues json_list;
      json_geom_obj json;
      json_loc json;
      l_lat  VARCHAR2(40);
      l_lng  VARCHAR2(40);
      l_status VARCHAR2(255);
      json_accuracy json;
      --temp_string varchar2(10000);
      n_first_comma number;
      n_second_comma number;
      n_level_length number;
      BEGIN
    /* TODO implementation required */
    l_private_key_bin := utl_encode.base64_decode(UTL_I18N.string_to_raw(l_private_key_b64_alter, 'AL32UTF8'));
    l_address:=APEX_UTIL.URL_ENCODE(P_s_Address);
    --dbms_output.put_line(l_address);
    l_address := replace(l_address,' ','+');
    l_path := '/maps/api/geocode/json?address='||l_address||'&'||'sensor=true';
    dbms_output.put_line(l_path);
    l_signature_mac :=DBMS_CRYPTO.mac(UTL_I18N.string_to_raw(l_path, 'AL32UTF8'), DBMS_CRYPTO.hmac_sh1,l_private_key_bin);
    l_signature_b64:= UTL_RAW.cast_to_varchar2(UTL_ENCODE.base64_encode(l_signature_mac));
    l_signature_b64_alter_back:=translate(l_signature_b64,'+/','-_');
    dbms_output.put_line(l_signature_b64_alter_back);
    --get response from Google map service
    l_url:=l_Google_service_domain||l_path||'&client='||l_client_name||'&signature='||l_signature_b64_alter_back;
    --l_url:=l_Google_service_domain||l_path;
    dbms_output.put_line(l_url);
    l_page:=utl_http.request_pieces( l_url, 99999);
    for i in 1..l_page.count loop
    l_response:=l_response||l_page(i);
    end loop;
    n_actual_length:=length(l_response);
    dbms_output.put_line(n_actual_length);
    dbms_output.put_line(l_response);
    --parse JSON result
    json_obj:=new json(l_response);
    l_status := json_ext.get_string(json_obj, 'status');
    IF l_status = 'OK' then
    jl_listOfValues := json_list(json_obj.get('results'));
    json_tempobj := json(jl_listOfValues.get(1));
    json_geom_obj := json(json_tempobj.get(3));
    json_loc := json_ext.get_json(json_geom_obj, 'location');
    l_lat := to_char(json_ext.get_number(json_loc, 'lat'));
    l_lng := to_char(json_ext.get_number(json_loc, 'lng'));
    P_s_Geocoding:=l_lat||','||l_lng;
    dbms_output.put_line('##########'||P_s_Geocoding);
    case json_ext.get_string(json_geom_obj, 'location_type')
    when 'ROOFTOP' then P_n_accuracy:=9;
    when 'RANGE_INTERPOLATED' then P_n_accuracy:=7;
    when 'GEOMETRIC_CENTER' then P_n_accuracy:=5;
    else P_n_accuracy:=3;
    end case;
    P_b_success:=true;
    else
    P_b_success:=false;
    P_n_accuracy:=0;
    P_s_Geocoding:='0,0';
    end if;
      END;

  • Using Apple Mac Developer account for code signing

    Has anyone been using their Apple Mac Developer account for code signing and Adobe Air desktop App?
    Any hints, tips comments appreciated!

    Why would I do that?  I simply want to know, is the binary file I downloaded signed by with MY cert?  I can determine this within reasonable doubt by answering two simple questions:
    1.  Is the cert that this file signed with valid (chain of trust and all that).
    2.  What is the name of the cert (the identity).
    If the Identity is the right one (in our case, the name of our company) and it is valid, then I will trust that this binary is ours.
    Maybe this will clarify my question. I guess I could rephrase this question as:
    "How do I write a simple tool that will verify a file has a valid signature and will give me the signer's identity"?

  • How to generate localized chars using code point in Solaris 10?

    Hi All,
    Do enybody know how to generate localized chars (for example Japanese) using code points in Solaris 10?
    Like in the following web page:
    http://www.isthisthingon.org/unicode/index.phtml
    Unicode, shift-jis
    U+4e2f 87a3 �N
    U+4e3b 8ee5 ��
    U+4e3c 98a5 �S
    U+4f5c 8dec ��
    Thanks,
    Daniel

    I have found a "Code Point Input Method" tool in the following page:
    http://java.sun.com/products/jfc/tsc/articles/InputMethod/inputmethod.html
    Using this tool user can enter hexadecimal code point and the output is some char.
    But this tool doesn't work. I run this in the follwoing way:
    # java -jar CodePointIM.jar
    After this error message appers:
    Failed to load Main-Class manifest attribute from
    codepointim.jar
    If anybody could help I will be appreciate.
    Regards,
    Daniel

  • How to generate an Interupt for DMA transfer from Counter on NI-PCI-6602

    dear guys:
          how to generate an Interupt for DMA transfer from Counter on NI-PCI-6602,and I have set the DMA and DMA_INT, and also the global interrupt register.
    but there is no Interupt generated in the Interupt callback function.And when I have set the DMA_INT and global interrupt register ,and then read the relevant register,the relevant bit is also 0.
         I suspect there is an Interupt register contral, like the MITE, you must write the value to 0xc4 for opening .
         there is some codes In my enclosure .What can I do?
    Attachments:
    TEST.C ‏21 KB

    dear Steven_T:
            the registers are In my enclosure ,if you have some ideas,please reply me  first time.thank you !
    Attachments:
    PCI6602.pdf ‏818 KB

  • Certificate for code signing expires soon

    Hi
    since several days I am getting a warning message from my OS X server telling me that the Certificate for code signing will expire soon
    Certificate Expires Soon -servername.xx Signierungszertifikate für Code
    The following certificate is about to expire on your server,servername.xx:
    Name: servername.xx Signierungszertifikate für Code
    Expiration Date: 15. Mai 2013 10:30:44 MESZ
    I looked under Certificates in Server app but this certificate does not appear. It's visible only in Key Chain under System and I suppose it is one which was created automaticely when I set up the server running under Mountain Lion. How can I renew this certificate ? Thanks for help
    Carlotta

    problem solved - Jonathan Melville's answer gave me the hint. Thanks
    Jonathan Melville Atlanta, GA
    This solved my questionRe: Configuration Profile Code-Signing Certificates 
    24.07.2012 12:19 (in response to Larry Goldman)

  • How to generate xml-file for SAP Fiori (UI add-on) with Solution Manager 7.0.1?

    Hello Guru,
    could you please help with my issue with Fiori Installation.
    We want to install SAP Fiori Front-End (GW+UI) on the Sandbox system with SAP Netweaver 7.3.1. (SP14)
    Gateway component (SAP GW CORE 200 SP10) was installed without any problems.
    But I need to install UI-add-on (NW UI Extensions v1.0) and when I try to install it via SAINT, transaction said me that I need to generate xml-file for it (as in General notes for UI add-on mentioned).
    But I have Solution Manager 7.0.1 and in MOPZ for this version I do not have option  "install Add-on" as it written in Guide for ui add-on installation.
    Could you please help me with advice how to generate xml-file for UI add-on installation on SolMan v.7.0.1?
    If where is no way, but only to upgrade Solution Manager, maybe somebody could give me xml-file for your system (for NW 731) and I will change it to my needs, I will be very grateful!
    Thanks in advance for any help!!!
    Bets regards,
    Natalia.

    Hello Guru,
    could you please help with my issue with Fiori Installation.
    We want to install SAP Fiori Front-End (GW+UI) on the Sandbox system with SAP Netweaver 7.3.1. (SP14)
    Gateway component (SAP GW CORE 200 SP10) was installed without any problems.
    But I need to install UI-add-on (NW UI Extensions v1.0) and when I try to install it via SAINT, transaction said me that I need to generate xml-file for it (as in General notes for UI add-on mentioned).
    But I have Solution Manager 7.0.1 and in MOPZ for this version I do not have option  "install Add-on" as it written in Guide for ui add-on installation.
    Could you please help me with advice how to generate xml-file for UI add-on installation on SolMan v.7.0.1?
    If where is no way, but only to upgrade Solution Manager, maybe somebody could give me xml-file for your system (for NW 731) and I will change it to my needs, I will be very grateful!
    Thanks in advance for any help!!!
    Bets regards,
    Natalia.

  • How to generate BP number for the employee (ECC to CRM) ...

    Hi all,
    can any one give solution for ,how to generate BP number for the employee from ECC to CRM other than active status,as i downloaded employee data from ECC to CRM through ALE/IDOC,as only active employment status employees are got BP number generated,remaining also transfered to CRM but BP number is not generated for those employees,these employee records i can able to see in the HRP5580- HRP5587 tables.
    thanks in advance.
    vamshi.
    Message was edited by:
            vamshidher rao

    Hi,
    Or are you looking for this:
    SELECT serial_number, paaf.assignment_number
    FROM pay_assignment_actions paa, per_all_assignments_f paaf
    WHERE action_status = 'C'
    AND paaf.assignment_id = paa.assignment_id
    AND serial_number IS NOT NULL
    AND SYSDATE BETWEEN paaf.effective_start_date AND paaf.effective_end_date;
    - Viky
    Edited by: Viky on Dec 17, 2010 11:42 AM

  • How To Generate Spool request for a SAP-Script form

    How To Generate Spool request for a SAP-Script form

    Hai   Rahaman,
    After getting the print preview of the SCRIPT.
    Click On  PRINT.
    Buttom of the page one spool request will be generated by system.
    Go to  SP01.
    You Can Find  SPOOL Reqest Number.
    Regards.
    Eshwar.

  • CodeSign error: no certificate found in keychain for code signing identity

    I've been wrestling with this for a week. Can someone help. I have followed the instructions closely to get my iphone app ready for distribution, but I cannot compile my app due to the following error:
    CodeSign error: no certificate found in keychain for code signing identity 'iPhone Distribution: iPhone Developer (my name)
    However, it definitely is there. In my Keychain I see the proper certificate. Furthermore, in the build file my Code Signing Identity -> Any iPhone OS Device is set to iPhone Distribution: (my name) but under "Code Signing Provisioning Profile" there are no valid choices. The distribution certificate is grayed out.
    Any help/advice would be greatly appreciated!!

    For the build error, "codesign error: code signing identity 'iphone developer' does not match any code-signing certificate in your keychain":
    1) Open Keychain Access application.
    2) Select the "Systems" tab under the Keychains sidebar and "certificates" under the Categories sidebar.
    3) You should see the "com.apple.kerberos.kdc" and/or "com.apple.systemdefault" certificates with a red x in the icon.
    4) Double click them and under the "trust" node change the "When using this certificate: " tab to Always Trust. You may need to restart Xcode for this to work.

  • How I create my signature for mail?

    How I create my signature for mail?

    This message should have been posted in the OS X Maverick Forums.
    Go to Mail Preferences/Signatures. Choose the Account you want the signature for. Click +. Create your signature.

  • I was able to create a digital signature for someone else and use it. How is that protected??

    I was able to create a digital signature for my boss who's on vacation using his email address. I figured when I used the signature he would get some sort of email confirmation letting him know, but he got nothing. So it seems like I could create a signature for anyone and use it on any document without their knowledge. What's the protection against anyone creating a signature for anyone else and using it whenever?? Am I missing something??

    A digital signature can not be used to verify someone's identity. I can create a signature using anyone's name and email address. In fact, those things are irrelevant to the signature. The only thing that matters is the key used to create it, and therefore to verify it.

  • PCI-6281 How to use80 mHZ timebase for A/d and D/A sample clocks

    Does anyone know how to use the 80 mHZ internal clock as the timebase for my A/D and D/A sample clocks rather than the default 20 mHZ timebase?
    I am using straight NI-DAQmx version 8.3 with C code. No Lab View, no Measurement Studio.
    I have an application which uses the D/A to generate a sequence that is collected by the A/D.  The D/A is clocked out at an integral multiple of the A/D clock.  In order to maintain this integral relationship I can only use a limited set of Sample Clock Timebase Divisor pairs (as returned by DAQmxGetSampClkTimebaseDiv).  This means that am further from my desired base frequency than normal.  For example, using the degault 20 mHZ timebase, if I want a 2000 hz center fequency, the closest I can get is 2003.205 hz.
    I cannot find anyway to use the 80 mHZ internal clock as the timebase for my A/D and D/A sample clocks.  If I could, it would be possible to get closer to my desired center frequency.

    Post is responded to in the multifunction DAQ forumn.
    PCI-6281 How to use80 mHZ timebase for A/d and D/A sample clocks
    Have a good one.
    Michael D
    Applications Engineering
    National Instruments

  • How do I disable transparency for the menubar and addressbar in firefox?

    How do I disable transparency for the menubar and addressbar in firefox? (This does not mean disable windows aero or transparency in windows 7. A workaround has been posted. Stop spamming threads with disable transparency and aero everytime someone asks about this.)
    It is difficult to read.
    Edit:
    Is there a setting to tone down the Aero usage of the in Firefox 5 so it looks more like Firefox 3.6. Is there a way to do this in the preferences or inside about:config?
    I know what Aero is and how to turn it off.
    The 2nd reply has images attached show why it is difficult to read. An light spot on a desktop background or an icon can make it very difficult to read. This is the #1 reason why I keep going back to 3.6.

    If you are up to tweaking some CSS code in a style see
    "Color Toolbar(s) to identify profile (DM*)" -- in http://userstyles.org/styles/9514, and you must read all of the description material understand what has to be done.
    It is a style, and playing with the code is what styles are about. You will have to copy the section of code in the description to the bottom of the style for it to be complete to remove additional Aero effects, and choose two or three colors for the toolbars.

Maybe you are looking for