c# - 代码签名 VS 驱动程序签名证书

Question

我编写了一个带有 Nullsoft 安装程序的 C# 程序，我希望对其进行签名，首先是因为它会被下载，其次是因为它包含要安装的驱动程序，否则它将无法在 64 位系统上运行。

现在我以前从未签署过我的代码，而且我发现了两个单独的对代码签名证书和驱动程序签名证书的引用。

这两个是分开的吗？或者我可以使用代码签名证书对我的程序和驱动程序进行签名吗？

Answer 1

I am not sure if you can use the same Certificate for signing both of them. But here is a recommondation how to sign both for a one time fee:

Microsoft only allows some of the CAs the ability to create Certificates which are capable to sign drivers. You can find the List of CAs on this MSDN Website.

My personal recommondation is StartSSL, because it's very cheap and delivers the same quality VeriSign or thers would deliver. Signing drivers using StartSSL requires StartSSL Extended Validation. You can find more Information and pricing here.

(Hint: For that one time fee for validation, you can create ONE CodeSigning-Certificate and a lot of Wildcard SSl Certificates for free!)