Code Signing: KB Article and Cheap Certificates

If you had previously installed any version of Excelsior JET prior to 7.2 on Windows Vista or Windows 7, you may have noticed that the UAC prompt for version 7.2 looks differently:

Can you spot the differences? 😉

This is because Excelsior JET 7.2 setup files are digitally signed. As you may see, a digital signature helps confirming the integrity and origin of the downloaded file to the user. (Torrent tracker frequenters, verify the signature after getting your “full version”.)

Users regularly ask us how to go about signing their own applications and installers. Based on my fresh code signing experience, I have put together a Knowledge Base article explaining the basics of code signing. The Advanced section covers the build process tweaks required to ensure interoperability with executable post-processing done by JetPackII.

Certificate Pricing

Code signing certificates can be expensive. 1-year certificate may cost as much as $500 (VeriSign). When shopping for a certificate myself, I have come across a much more reasonably priced offer that I want to share with you.

If you remember what TUCOWS originally stood for, you have been in this industry for too long. Anyway, today’s Tucows has a special reseller deal with a major Certificate Authoity (CA) and sells their code signing certificates for $195 for three years. Just in case, the same 3-year certificate bought directly from that CA would cost you $500.

To get advantage of this offer, go to Tucows Author Resource Center, register as an author (free), log in, and follow the “Code Signing Certificates” link in the sidebar.

If you know other places to get code signing certificates for cheap, please share them in the comments.

Categories: Excelsior JET


Comments are closed.