Livoa LogoLivoa
Stage 1: CERT SETUP
1️⃣ Create Root CA


- Generate Private Key (.key)

- Generate Root CA Cert (.crt)


2️⃣ Issue Code Signing Certificate

- Signed by Root CA

- Export as .PFX (with private key)


3️⃣ Store in Project Folder

- rootCA.crt

- codeSignCert.pfx

Stage 2: SIGNING DLLs
1️⃣ Install signtool.exe (Windows SDK)



2️⃣ Prepare signing list

- Text file (dll_list.txt) listing all DLLs


3️⃣ Write batch script

- Reads dll_list.txt

- Runs signtool.exe on each DLL using .pfx file


4️⃣ Modify build pipeline

- Calls batch script after DLL compilation


🔒 RESULT: All DLLs digitally signed with .pfx certificate

Stage 3: INSTALLER BUNDLE
1️⃣ Embed Root CA cert into Installer



2️⃣ Update installer script:

- On installation → Adds Root CA cert to Trusted Root Certificate Store on target machine


3️⃣ Bundle Signed DLLs + Installer


4️⃣ Install Application

- During launch, application verifies DLL signatures

✔ Uses Trusted Root CA

✔ Ensures integrity & authenticity

new

by surya

0
0 uses