Re: Verify authenticode signature

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



There isn't an exposed public way to do this. You'd have to parse the PE
header yourself and use CAPI to verify the signature. PE format is
publically documented.

--
Scott Yost
Software Development Engineer/Test
Microsoft Corp.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Pieter Philippaerts" <Pieter@xxxxxxxxxxxxxxxxxxx> wrote in message
news:eWhSSxBiHHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
Hi guys,

I need to programmatically verify an authenticode signature on an
executable on my Windows Mobile 5 system. Unfortunately, I can't seem to
get the WinVerifyTrust function to work (I have working code for the
desktop, but I have no idea in which dll it resides in Windows CE;
apparently not 'wintrust.dll' or 'coredll.dll'). Does anyone know how I
can get this to work? Windows itself is able to verify the authenticode
signatures, so surely there must be some kind of public API we can access,
no?

Thanks,
Pieter




.



Relevant Pages

  • Re: Why are programs not digitally signed to protect against viruses?
    ... Most windows files are signed - not within the EXE/DLL but by a separate ... You can verify the signatures with sigverif.exe tool. ... This allows signing of files other than executables - such as INFs. ... Microsoft Signature Verification ...
    (microsoft.public.security)
  • Unverified Signature
    ... I'm trying to download a program from a website that I trust, but Windows ... cannot verify the signature, therefore the program will not install. ...
    (microsoft.public.windowsxp.help_and_support)
  • verifying cmd.exe
    ... I can use WinVerifyTrust to verify the signature of a signed executable ... before executing it. ... What function do I use to verify a Windows ...
    (microsoft.public.platformsdk.security)
  • Re: Antivirus
    ... signature, and hopefully you weren't infected by then. ... That's why I really like Avast for my Windows installations. ... all sorts of cookies and javascript crap pops up as a "virus" or threat. ...
    (Ubuntu)
  • Re: Why are programs not digitally signed to protect against viruses?
    ... Microsoft MVP (Windows Server: Security) ... > This allows signing of files other than executables - such as INFs. ... > Microsoft Signature Verification ... > Service Pack 2 ...
    (microsoft.public.security)