Disable certification enforcing during dev phase.

contains all delphi packages mentioned below

Disable certification enforcing during dev phase.

Postby Davita » Tue May 05, 2015 10:09 am

Hi guys. I think the title says it all. I'm aware that madshi added driver signing for security reason and he did it right, but I don't see why the library should require it during development. As you already know, windows has a feature to boot in unsecured mode where you can run unsigned drivers, for development purpose of course. I understand that it would be a bit risky, but I think it's possible to configure the driver to run on one specific hardware, just like we are configuring it to work with specific injection dlls.
What do you think? Is it doable/possible?

Thanks.
Davita
 
Posts: 161
Joined: Tue Sep 13, 2005 7:31 pm

Re: Disable certification enforcing during dev phase.

Postby madshi » Tue May 05, 2015 10:15 am

I guess it should be possible, but I haven't tried it myself. Signing is pretty fast, so I don't see much of an advantage *not* doing it. Unless you don't have a certificate, of course...
madshi
Site Admin
 
Posts: 9338
Joined: Sun Mar 21, 2004 5:25 pm

Re: Disable certification enforcing during dev phase.

Postby Davita » Tue May 05, 2015 10:25 am

Yes, it's very fast and technically not a problem at all. The problem is that development takes time, and certificate costs money. It's an expense that can be avoided I think :)
Davita
 
Posts: 161
Joined: Tue Sep 13, 2005 7:31 pm

Re: Disable certification enforcing during dev phase.

Postby madshi » Tue May 05, 2015 10:28 am

Ok. You could also google "selfcert". Maybe that helps. But I haven't tried that one myself, either.
madshi
Site Admin
 
Posts: 9338
Joined: Sun Mar 21, 2004 5:25 pm

Re: Disable certification enforcing during dev phase.

Postby Davita » Tue May 05, 2015 10:34 am

You mean self signing the certificate? It will work if the driver doesn't check if it is signed with trusted certificate provider... Does it? :)
Davita
 
Posts: 161
Joined: Tue Sep 13, 2005 7:31 pm

Re: Disable certification enforcing during dev phase.

Postby madshi » Tue May 05, 2015 12:05 pm

My driver doesn't currently check whether it's signed at all. As long as you make the OS happy, the driver is happy, too.
madshi
Site Admin
 
Posts: 9338
Joined: Sun Mar 21, 2004 5:25 pm

Re: Disable certification enforcing during dev phase.

Postby Davita » Wed May 06, 2015 9:49 am

Thats quite a news. I saw Iconic saying that the cert does require the certificate (just can't find the link). Maybe I misunderstood something :)

Thanks madshi, I'll give a try :)
Davita
 
Posts: 161
Joined: Tue Sep 13, 2005 7:31 pm


Return to madCollection

Who is online

Users browsing this forum: No registered users and 1 guest

cron