working with signcode ,makecert , etc

all was working properly except the timestamp
i have an authority server on win2k machine
i made a certificate
in this case my authority server is the certificate provider
but how can i use the timestamp ?
thanks

now it works
i run chktrust mycab.cab
the result is
mycab.cab:succeeded
and it opens the certificate and it was signed
i open the browser and i put the path of the html file which loads the activex control
the browser blocked the control , i allowed it to run , but it said uknown publisher
and it didnt run

Yep the problem is you need a trusted certificate provider like verisign, whose public key is part of IE.

This is what I have found about the timestamp server:

A timestamp server validates the date and time that the cabinet file
was signed. Certificate files may expire. Contact your certificate file
provider (certificate authority, such as, Verisign) for the location of
their timestamp server.

---
You might set your IE security settings to low, or define a trusted zone to make this active x control working.
Using standard security settings and running an homesigned control is a security breach.


Tolomir

i have it ,
signcode -v mycert.pvk -spc mycert.spc new.cab -t http://timestamp.verisign.com/scripts/timstamp.dll 
i put this code ,
then i run chktrust new.cab
it pops the certificate
if i have a certificate authority server , where would the timestamp server be ?

sorry cannot help you any further, since I've never created such a signature.

But maybe the verisign timestamp server is good enough? Even if you are using a different autority server... give it a try. Good luck.


Tolomir