Please help getting our new certificate approved!

English support forum

Moderators: white, Hacker, petermad, Stefan2

Post Reply
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Please help getting our new certificate approved!

Post by *ghisler(Author) »

This is a request for help to everyone who is NOT participating in the beta test, or has not downloaded the new installer yet:

We have a new certificate for our company "Ghisler Software GmbH" to sign our programs. Unfortunately Windows Defender always takes a very long time to flag this certificate as good. Until this happens, users get an ugly warning that the program is unrecognized and potentially dangerous.

To help us get the certificate approved, please do the following:

1. Go to https://www.ghisler.com/950_beta.htm
2. Click on "Combined web installer via https"
3. Run the installer
4. Click on "More Info" and then "Run anyway"
-> the new installer should start
5. Abort the installation
Author of Total Commander
https://www.ghisler.com
User avatar
Wilhelm M.
Power Member
Power Member
Posts: 990
Joined: 2003-06-05, 10:45 UTC

Re: Please help getting our new certificate approved!

Post by *Wilhelm M. »

Wanted to help, but something unexpected happened. At step 2 I am asked to either Save the file or Cancel the download. So I klick Save, then start the installer from the harddisk. The installer is started right away without displaing "More Info" and then "Run anyway". Then I abort the installation. Now I'm asking myself: Is that it?

Addition... I had forgotten that on my system the UAC is reduced to a minimum (to be honest, it's reduced to zero :wink: ). Now I have increased the UAC level. But that made no difference.
Grüße/Regards,
Wilhelm
User avatar
Stefan2
Power Member
Power Member
Posts: 4132
Joined: 2007-09-13, 22:20 UTC
Location: Europa

Re: Please help getting our new certificate approved!

Post by *Stefan2 »

ghisler(Author) wrote: 2019-11-25, 11:50 UTC
This is a request for help to everyone who is NOT participating in the beta test, or has not downloaded the new installer yet:

Unfortunately Windows Defender ....

Me think this is for people who
a - use Windows Defender (which would show that "More Info" and then "Run anyway")
b - have not clicked on "Combined web installer via https" or executed "totalcmdbetainst.exe" yet in the past



So I am out.


 
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: Please help getting our new certificate approved!

Post by *ghisler(Author) »

The problem only occurs with the new "totalcmdbetainst.exe" for beta 6. The older versions were still signed with our old certificate, which has unfortunately expired. The new one is valid for 3 years, so once it has been approved, there wont be any problems for 3 years.

2Wilhelm M.
Are you using Windows 7? I didn't get these Windows Defender warnings on it.
Author of Total Commander
https://www.ghisler.com
User avatar
Usher
Power Member
Power Member
Posts: 1675
Joined: 2011-03-11, 10:11 UTC

Re: Please help getting our new certificate approved!

Post by *Usher »

Microsoft mentioned that in some cases new certificates should use SHA-2:
https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus
Dual signed (SHA-1/SHA-2) signatures are probably a good solution, I suppose.
Andrzej P. Wozniak
Polish subforum moderator
User avatar
petermad
Power Member
Power Member
Posts: 14739
Joined: 2003-02-05, 20:24 UTC
Location: Denmark
Contact:

Re: Please help getting our new certificate approved!

Post by *petermad »

then start the installer from the harddisk. The installer is started right away without displaing "More Info" and then "Run anyway".
Same here.

I haven't run totalcmdbetainst.exe before on the test computer.
License #524 (1994)
Danish Total Commander Translator
TC 11.03 32+64bit on Win XP 32bit & Win 7, 8.1 & 10 (22H2) 64bit, 'Everything' 1.5.0.1371a
TC 3.50b4 on Android 6 & 13
Try: TC Extended Menus | TC Languagebar | TC Dark Help | PHSM-Calendar
User avatar
Wilhelm M.
Power Member
Power Member
Posts: 990
Joined: 2003-06-05, 10:45 UTC

Re: Please help getting our new certificate approved!

Post by *Wilhelm M. »

Sorry if I caused some confusion. I think Stefan is right - it is only related to Windows Defender. Which I do not use.

@Christian Ghisler - Yes, I use Windows 7 32-bit here, but that seems not to matter (see above).
Grüße/Regards,
Wilhelm
User avatar
petermad
Power Member
Power Member
Posts: 14739
Joined: 2003-02-05, 20:24 UTC
Location: Denmark
Contact:

Re: Please help getting our new certificate approved!

Post by *petermad »

it is only related to Windows Defender. Which I do not use.
But I use Defender, and I don't get any "More Info" alerts or anything - the installer just starts
License #524 (1994)
Danish Total Commander Translator
TC 11.03 32+64bit on Win XP 32bit & Win 7, 8.1 & 10 (22H2) 64bit, 'Everything' 1.5.0.1371a
TC 3.50b4 on Android 6 & 13
Try: TC Extended Menus | TC Languagebar | TC Dark Help | PHSM-Calendar
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: Please help getting our new certificate approved!

Post by *ghisler(Author) »

Microsoft mentioned that in some cases new certificates should use SHA-2:
It's dual signed with SHA1 and SHA2, just like with the previous certificate. However, we use Digicert now and not Symatec (they sold their cert business to Digicert).
But I use Defender, and I don't get any "More Info" alerts or anything - the installer just starts
I still get the warning here on Windows 10. You don't write on which version you tested it, your header mentions Windows XP, 7, 8.1, and 10.
Author of Total Commander
https://www.ghisler.com
User avatar
petermad
Power Member
Power Member
Posts: 14739
Joined: 2003-02-05, 20:24 UTC
Location: Denmark
Contact:

Re: Please help getting our new certificate approved!

Post by *petermad »

You don't write on which version you tested it, your header mentions Windows XP, 7, 8.1, and 10.
Oh, Sorry - I tried on Windows 10 1909 and Windows 7. I have standard setting for UAC. I am testing from admin accounts.

Only Windows 8.1 and 10 comes with Windows Defender, on Windows 7 it is called Microsoft Security Essentials.

Microsoft Security Essentials can no longer be installed on Windows XP.
License #524 (1994)
Danish Total Commander Translator
TC 11.03 32+64bit on Win XP 32bit & Win 7, 8.1 & 10 (22H2) 64bit, 'Everything' 1.5.0.1371a
TC 3.50b4 on Android 6 & 13
Try: TC Extended Menus | TC Languagebar | TC Dark Help | PHSM-Calendar
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: Please help getting our new certificate approved!

Post by *ghisler(Author) »

I'm still getting the warning on multiple Windows 10 PCs...
Author of Total Commander
https://www.ghisler.com
rmmaniac
Junior Member
Junior Member
Posts: 20
Joined: 2009-04-14, 05:56 UTC

Re: Please help getting our new certificate approved!

Post by *rmmaniac »

can I exclude tc folders from Windows Defender
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: Please help getting our new certificate approved!

Post by *ghisler(Author) »

No, that doesn't help in this particular case.
Author of Total Commander
https://www.ghisler.com
User avatar
Phred
Senior Member
Senior Member
Posts: 375
Joined: 2009-06-16, 15:24 UTC
Location: SEAu

Re: Please help getting our new certificate approved!

Post by *Phred »

How's the need for our doing this, in October 2020?
Regards, PhredE
Licence holder since 1999
Awaiting a $D donors-token for the title-bar so we can display that we have donated further.
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48021
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: Please help getting our new certificate approved!

Post by *ghisler(Author) »

Thanks for the reminder, it's no longer necessary. I will change the thread to normal priority.
Author of Total Commander
https://www.ghisler.com
Post Reply