logo
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

2 Pages12>
Options
Go to last post Go to first unread
Mike  
#1 Posted : Monday, November 11, 2013 10:39:44 AM(UTC)
Mike


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 5/30/2012(UTC)
Posts: 477
Location: Raleigh, NC

Thanks: 52 times
Was thanked: 75 time(s) in 61 post(s)
We've gotten a few requests to rename client files that are downloaded to guests.

To rename your client files, you will not need to get into Visual Studios, but you will need your own code signing certificate. Attached to this post is a resigner script we developed that should make this process easier.

If you rename the file to a .txt extension, you can see what the script is doing. This has been tested, but not something we are officially supporting at this time. Any changes to the clients files would have to be maintained and manually updated with each release. All questions should be directed to this post.

Script for signing client files

(If there is anything missing it will prompt you to install the missing files.)

1. The machine where you will be working from to sign the scripts should have Windows SDK and Java JDK installed. The versions depend a bit on your OS but here are a couple of download sites:
a. http://www.oracle.com/te...ase/downloads/index.html
b. http://www.microsoft.com...oad/details.aspx?id=8279

2. The script can be run from any machine that has network access to the installation folder of ScreenConnect. So basically, a machine on the same domain with access to computername\ProgramFiles\ScreenConnect

3. You will need the PFK for the key/cert and the script will step through and resign all of the different client files for you. There are quite a few files, so the design of the script was to catch all of the different files as opposed to requiring you to open/sign each specific file manually.

I hope this information is helpful.

Edited by moderator Tuesday, February 25, 2014 2:45:30 PM(UTC)  | Reason: Not specified

File Attachment(s):
resigner.cmd (3kb) downloaded 219 time(s).
ScreenConnect Team
vaishali  
#2 Posted : Wednesday, February 12, 2014 1:36:26 PM(UTC)
vaishali


Rank: Newbie

Joined: 2/12/2014(UTC)
Posts: 6
United Kingdom
Location: London

Hi Jeff,

The script is running but it is giving me error:

keytool error: java.io.FileNotFoundException: <The system cannot find the path specified>
Could not find C:\Program Files\Java\jdk1.7.0_51\bin\tempkeystore.jks
''' is not recognized as an internal or external command, operable program or batch file.


Can you please help?

Thanks,
Vaishali
vaishali  
#3 Posted : Wednesday, February 12, 2014 5:35:49 PM(UTC)
vaishali


Rank: Newbie

Joined: 2/12/2014(UTC)
Posts: 6
United Kingdom
Location: London

Also when we try and run a remote session it errors now with a message box:
Cannot continue. The application is improperly formatted. Contact the application vendor for assitence;

On clicking Details button the below appears:
PLATFORM VERSION INFO
Windows : 6.1.7601.65536 (Win32NT)
Common Language Runtime : 4.0.30319.18444
System.Deployment.dll : 4.0.30319.18408 built by: FX451RTMGREL
clr.dll : 4.0.30319.18444 built by: FX451RTMGDR
dfdll.dll : 4.0.30319.18408 built by: FX451RTMGREL
dfshim.dll : 4.0.41209.0 (Main.041209-0000)

SOURCES
Deployment url : https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=URL&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=9c980bc0-b2f8-4ac5-9a0f-f0a2ad85a9ef&i=Sunil&n=nK32rgINQWRtaW5pc3RyYXRvcp9nGFj%2FVTvriyRAr6sljlJsuBgQkRejByJCxI5aZRzpIgY%3D&e=Support&y=Host

ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=URL&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=9c980bc0-b2f8-4ac5-9a0f-f0a2ad85a9ef&i=Sunil&n=nK32rgINQWRtaW5pc3RyYXRvcp9nGFj%2FVTvriyRAr6sljlJsuBgQkRejByJCxI5aZRzpIgY%3D&e=Support&y=Host resulted in exception. Following failure messages were detected:
+ Exception reading manifest from https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=URL&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=9c980bc0-b2f8-4ac5-9a0f-f0a2ad85a9ef&i=Sunil&n=nK32rgINQWRtaW5pc3RyYXRvcp9nGFj%2FVTvriyRAr6sljlJsuBgQkRejByJCxI5aZRzpIgY%3D&e=Support&y=Host: the manifest may not be valid or the file could not be opened.
+ Manifest XML signature is not valid.
+ No signature was present in the subject.


COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.

WARNINGS
There were no warnings during this operation.

OPERATION PROGRESS STATUS
* [12/02/2014 15:01:05] : Activation of https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=URL&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=9c980bc0-b2f8-4ac5-9a0f-f0a2ad85a9ef&i=Sunil&n=nK32rgINQWRtaW5pc3RyYXRvcp9nGFj%2FVTvriyRAr6sljlJsuBgQkRejByJCxI5aZRzpIgY%3D&e=Support&y=Host has started.

ERROR DETAILS
Following errors were detected during this operation.
* [12/02/2014 15:01:09] System.Deployment.Application.InvalidDeploymentException (ManifestParse)
- Exception reading manifest from https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=URL&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=9c980bc0-b2f8-4ac5-9a0f-f0a2ad85a9ef&i=Sunil&n=nK32rgINQWRtaW5pc3RyYXRvcp9nGFj%2FVTvriyRAr6sljlJsuBgQkRejByJCxI5aZRzpIgY%3D&e=Support&y=Host: the manifest may not be valid or the file could not be opened.
- Source: System.Deployment
- Stack trace:
at System.Deployment.Application.ManifestReader.FromDocument(String localPath, ManifestType manifestType, Uri sourceUri)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
--- Inner Exception ---
System.Deployment.Application.InvalidDeploymentException (SignatureValidation)
- Manifest XML signature is not valid.
- Source: System.Deployment
- Stack trace:
at System.Deployment.Application.Manifest.AssemblyManifest.ValidateSignature(Stream s)
at System.Deployment.Application.ManifestReader.FromDocument(String localPath, ManifestType manifestType, Uri sourceUri)
--- Inner Exception ---
System.Security.Cryptography.CryptographicException
- No signature was present in the subject.

- Source: System.Deployment
- Stack trace:
at System.Deployment.Internal.CodeSigning.SignedCmiManifest.Verify(CmiManifestVerifyFlags verifyFlags)
at System.Deployment.Application.Manifest.AssemblyManifest.ValidateSignature(Stream s)

COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.

Edited by user Thursday, February 13, 2014 9:53:27 AM(UTC)  | Reason: Not specified

vaishali  
#4 Posted : Wednesday, February 26, 2014 4:38:13 PM(UTC)
vaishali


Rank: Newbie

Joined: 2/12/2014(UTC)
Posts: 6
United Kingdom
Location: London

Hi support,

Thank you for updating scripting file. I tried to run new script file but it is still not working for me. Host and guest can only join session via Java. No other option is working. It is giving "cannot continue. The application is improperly formatted. Contact the application vendor for assistance" and when I click details button on that error message box it is giving below details,

PLATFORM VERSION INFO
Windows : 6.1.7601.65536 (Win32NT)
Common Language Runtime : 4.0.30319.1022
System.Deployment.dll : 4.0.30319.1 (RTMRel.030319-0100)
clr.dll : 4.0.30319.1022 (RTMGDR.030319-1000)
dfdll.dll : 4.0.30319.1 (RTMRel.030319-0100)
dfshim.dll : 4.0.31106.0 (Main.031106-0000)

SOURCES
Deployment url : https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=ra.pertechtual.com&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=8d27aa17-9f9a-465e-84e5-1b24e0950a41&i=Test&e=Support&y=Guest
Server : ScreenConnect/4.1.6060.5144-2677546693 Microsoft-HTTPAPI/2.0

IDENTITIES
Deployment Identity : Elsinore.ScreenConnect.WindowsClient.application, Version=4.1.6060.5144, Culture=neutral, PublicKeyToken=8d4280275320fd24, processorArchitecture=msil

APPLICATION SUMMARY
* Online only application.
* Trust url parameter is set.
ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=ra.pertechtual.com&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=8d27aa17-9f9a-465e-84e5-1b24e0950a41&i=Test&e=Support&y=Guest resulted in exception. Following failure messages were detected:
+ Downloading https://URL/Bin/creenConnect.Client.manifest did not succeed.
+ The remote server returned an error: (404) Not Found.

COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.

WARNINGS
There were no warnings during this operation.

OPERATION PROGRESS STATUS
* [2/26/2014 11:44:40 AM] : Activation of https://URL/Bin/Elsinore.ScreenConnect.Client.application?h=ra.pertechtual.com&p=8041&k=BgIAAACkAABSU0ExAAgAAAEAAQDRLtHgmC3sIhoUv7D%2FxILlH9nL5VBxV692bY%2FjXF6oe0MpT9eEOI%2FGrFRH0lHiRBjXzNYwyUWg4Rx5uqWqkomPRKST%2BP8aTsWxkkRDHFJtrZbfGyZ0FGlOuC%2BrIjC%2F1UQVMTYuTnk2WqzWRs3ZWo1j4NwjRKfrbQCGMqj9zXdYksNBQCqMJ8x4lWaipKPS9sNQ4%2FT%2BlwvhYjQ4MfOxVVvByyGnFlcv5wBtWLPPyX7Jiit7YWML6phyuHowwZl75aT%2BaQ0j9LaYkAgiGD5ECaUOLg3TyF9Y1G%2BD5AuDG64zz5ljosRddZd%2BWnLHRGQxB898FOjn%2FvrWuM70%2F9yAwCjN&s=8d27aa17-9f9a-465e-84e5-1b24e0950a41&i=Test&e=Support&y=Guest has started.
* [2/26/2014 11:44:41 AM] : Processing of deployment manifest has successfully completed.
* [2/26/2014 11:44:41 AM] : Installation of the application has started.

ERROR DETAILS
Following errors were detected during this operation.
* [2/26/2014 11:44:41 AM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
- Downloading https://URL/Bin/creenConnect.Client.manifest did not succeed.
- Source: System.Deployment
- Stack trace:
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadApplicationManifest(AssemblyManifest deploymentManifest, String targetDir, Uri deploymentUri, IDownloadNotification notification, DownloadOptions options, Uri& appSourceUri, String& appManifestPath)
at System.Deployment.Application.ApplicationActivator.DownloadApplication(SubscriptionState subState, ActivationDescription actDesc, Int64 transactionId, TempDirectory& downloadTemp)
at System.Deployment.Application.ApplicationActivator.InstallApplication(SubscriptionState& subState, ActivationDescription actDesc)
at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
--- Inner Exception ---
System.Net.WebException
- The remote server returned an error: (404) Not Found.
- Source: System
- Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)

COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.


It would be much appreciated if you can help on this issue.

Regards,
Vaishali

Edited by user Thursday, February 27, 2014 10:16:42 AM(UTC)  | Reason: Not specified

Jake  
#5 Posted : Thursday, February 27, 2014 12:56:23 AM(UTC)
Jake


Rank: Administration

Medals: Level 4: Wise Old Owl! Received 100 Thanks!

Joined: 4/9/2010(UTC)
Posts: 2,061

Thanks: 1 times
Was thanked: 393 time(s) in 188 post(s)
404 error. File gone?
ScreenConnect Team
vaishali  
#6 Posted : Thursday, February 27, 2014 10:21:44 AM(UTC)
vaishali


Rank: Newbie

Joined: 2/12/2014(UTC)
Posts: 6
United Kingdom
Location: London

Hi Support,

As you can see in the error details it is trying to download "creenConnect.Client.manifest" which is wrong file name. When I search for it under Bin directory the correct file name is "Elsinore.ScreenConnect.Client.manifest". So i am guessing the command script file changed the name of that client manifest file.

Let me know if you need any further information.

Thank you,
Vaishali
Jake  
#7 Posted : Wednesday, March 5, 2014 8:00:51 PM(UTC)
Jake


Rank: Administration

Medals: Level 4: Wise Old Owl! Received 100 Thanks!

Joined: 4/9/2010(UTC)
Posts: 2,061

Thanks: 1 times
Was thanked: 393 time(s) in 188 post(s)
What was the command line (including the current directory) of your call to resigner.cmd?
ScreenConnect Team
vaishali  
#8 Posted : Thursday, March 6, 2014 9:24:41 AM(UTC)
vaishali


Rank: Newbie

Joined: 2/12/2014(UTC)
Posts: 6
United Kingdom
Location: London

Hi Jake,

I am not sure what you are trying to ask here. But I changed the name in Bin directory to "creenConnect.Client.manifest" and it started working.

Thanks,
Vaishali
vaishali  
#9 Posted : Monday, March 17, 2014 1:40:40 PM(UTC)
vaishali


Rank: Newbie

Joined: 2/12/2014(UTC)
Posts: 6
United Kingdom
Location: London

Hi Support,

Today when I installed latest screenconnect version 4.2.6273.5177, I have noticed my Publisher name changed. So I would like to know if I have to run this code signing certificate script after each update?

Please reply as soon as possible.

Thanks,
Vaishali
teksigns  
#10 Posted : Monday, March 17, 2014 2:47:49 PM(UTC)
teksigns


Rank: Advanced Member

Medals: Bug Buster Level Two: Bugs are more afraid of you than you are of them...ScreenConnect Advisor: Focus Group MemberLevel 2: Lent a Helping Hand! 10 Thanks!

Joined: 6/20/2011(UTC)
Posts: 449
United States
Location: Salisbury, NC (Aka: Gurusonwheels)

Thanks: 17 times
Was thanked: 14 time(s) in 13 post(s)
I believe this is answered in the fist post .

"Any changes to the clients files would have to be maintained and manually updated with each release."

Quark  
#11 Posted : Tuesday, March 18, 2014 7:28:06 PM(UTC)
Quark


Rank: Newbie

Joined: 3/18/2014(UTC)
Posts: 3
Canada

I have read the script and understand the re-signing process.

What steps are needed to rename the files? Simply rename the executables and then re-sign? or am I missing something?
Alexander  
#12 Posted : Wednesday, March 19, 2014 8:02:37 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Renaming the files themselves will break stuff, but resigning them makes you show up as the publisher in the various confirmation dialogs and such, and lets you change the product name in the .application file.
You can change the names of the files that your clients download with the "FileDownload.BaseName" key under the Appearance tab.
ScreenConnect Team
Quark  
#13 Posted : Thursday, March 20, 2014 4:04:41 PM(UTC)
Quark


Rank: Newbie

Joined: 3/18/2014(UTC)
Posts: 3
Canada

Do I change the FileDownload.BaseName first or re-sign first? :)
Quark  
#14 Posted : Thursday, March 20, 2014 5:09:36 PM(UTC)
Quark


Rank: Newbie

Joined: 3/18/2014(UTC)
Posts: 3
Canada

OK I changed the FileDownload.BaseName and then ran the re-signer. Looks good except for the fact that the download name hasn't changed, still mentions your branding...Thoughts?
Alexander  
#15 Posted : Friday, March 21, 2014 4:48:40 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
FileDownload.BaseName doesn't require resigning, so either way should work. Not sure why the download name didn't change, though. My recommendation would be to contact Support to set up a session, and hopefully we can get to the bottom of this.
ScreenConnect Team
MikhailJB  
#16 Posted : Monday, August 4, 2014 8:58:45 AM(UTC)
MikhailJB


Rank: Member

Joined: 7/30/2014(UTC)
Posts: 11
Australia
Location: Melbourne

Hi,
I am trying to work out what I need to resign my custom install file.
I have edited the file using SuperOrca and tested it for installs and it is to my expecations.
Code signing certificate is ready.

My server is on linux, I assume this is all for local windows installed servers?

I have backed up my CentOS screenconnect folder and have it on my pc.
Tried running this resign.cmd file but it cant find screenconnect tried running it one folder above the screenconnect folder and inside it and it does not work.

What am I missing?
Thanks in advanvce,



Mikhail

Antiloop  
#17 Posted : Monday, August 4, 2014 10:25:09 AM(UTC)
Antiloop


Rank: Member

Joined: 10/7/2012(UTC)
Posts: 29
Location: Eindhoven

Originally Posted by: MikhailJB Go to Quoted Post
Hi,
I am trying to work out what I need to resign my custom install file.
I have edited the file using SuperOrca and tested it for installs and it is to my expecations.
Code signing certificate is ready.

My server is on linux, I assume this is all for local windows installed servers?

I have backed up my CentOS screenconnect folder and have it on my pc.
Tried running this resign.cmd file but it cant find screenconnect tried running it one folder above the screenconnect folder and inside it and it does not work.

What am I missing?
Thanks in advanvce,



Mikhail



perhaps the folders are a little different from the linux install?

I've done 5 minutes research, and it should be possible to do code signing at linux as well, all tools seem (i'm not sure for mage.exe but I assume so..) to be available in a linux variant
MikhailJB  
#18 Posted : Monday, August 4, 2014 11:59:25 AM(UTC)
MikhailJB


Rank: Member

Joined: 7/30/2014(UTC)
Posts: 11
Australia
Location: Melbourne

I am wondering if I can use the Resign.cmd script by installing the windows version on my laptop copying the bin file across from my centos box and then doing the codesigning and then copy it back up to the server?

Can someone post more details on what needs to be installed where and where exactly should the resign.cmd file be run from?

Regards,




MIKHAIL
Alexander  
#19 Posted : Monday, August 4, 2014 3:39:08 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Hmmm, it shouldn't matter where it's run from. What are you passing as the bin directory path?
ScreenConnect Team
MikhailJB  
#20 Posted : Tuesday, August 5, 2014 1:48:13 PM(UTC)
MikhailJB


Rank: Member

Joined: 7/30/2014(UTC)
Posts: 11
Australia
Location: Melbourne

Originally Posted by: Alexander Go to Quoted Post
Hmmm, it shouldn't matter where it's run from. What are you passing as the bin directory path?


Not sure I understand by what you mean by passing?

I saved resign.cmd to a folder in this case above /screenconnect which was copied from my Linux server and type resign.cmd?
Is there more to running this?

I have a newly signed custom msi file do I copy this signed or unsigned to the folder as elsinore.blahblahblah.msi?

I seriously would have thought the customisations would have been well documented but its all over the place wasted days doing searches etc to find what should be organised and procedurised.

Kind Regards,



MIKHAIL
Alexander  
#21 Posted : Tuesday, August 5, 2014 4:31:33 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
OK, it should prompt you for the PFX file path, the PFX password, and the Bin directory path; I was asking what you put for the Bin directory path.

The installer builder does modify the .msi file that it generates, so if you put a custom one into the Bin directory, the customizations probably wouldn't show up, and I'm pretty sure it would break the signing.
(And just to be clear, this script doesn't sign .msi files, just .exe, .manifest, .application, and .jar files.)

I know what you mean about customisations being all over the place, though the introduction of extensions in 5.0 is a step towards getting them all organized, at least.
ScreenConnect Team
MikhailJB  
#22 Posted : Thursday, August 7, 2014 3:16:05 AM(UTC)
MikhailJB


Rank: Member

Joined: 7/30/2014(UTC)
Posts: 11
Australia
Location: Melbourne

Hi,
Thanks for your reply, please to see that things will be an improvementin 5.0.
I will look at this again.

I get the following message all the checks for jdk etc all have done! after them until the last line I get the following"

Path>pauseError: Resource has been moved or is unavail
able. Please contact the forum admin.
'pauseError:' is not recognized as an internal or external command,
operable program or batch file.

Thanks,



MIKHAIL

Alexander  
#23 Posted : Thursday, August 7, 2014 2:14:22 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Hmm, can you paste all the output you're getting?
ScreenConnect Team
ditkar  
#24 Posted : Saturday, October 11, 2014 2:48:43 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
How to use this resigner.cmd. Where should I put what files to get this working. Apologies, I have no clue.

Alexander  
#25 Posted : Monday, October 13, 2014 2:49:18 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
You have to have the paths to keytool.exe, jarsigner.exe, mage.exe, and signtool.exe in your PATH variable (or, I think, having them in the same directory that you're running the script from would work too). These are from the Windows SDK and Java JDK.
The script will prompt you for the paths to the PFX file and the Bin directory of your installation, so they don't have to be in a specific place.
ScreenConnect Team
ditkar  
#26 Posted : Monday, October 13, 2014 3:16:33 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Newbie here... where would I find PATH variable to define or how to define PATH variable?

Tried putting the mentioned files into same folder as resigner.cmd didn't help.

I have resigner.cmd and all the tools mentioned in BIN folder of screenconnect.

Suggestions?
ditkar  
#27 Posted : Wednesday, October 15, 2014 1:53:04 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
I am still unable to use this script.. .any help would really appreciate.

Here's what I get...

D:\ScreenConnect\ReSign\Bin>resigner.cmd

D:\ScreenConnect\ReSign\Bin>for %A in (keytool.exe) do if "%~$PATH:A" == "" echo
Must have keytool.exe from JDK in PATH && goto :done

D:\ScreenConnect\ReSign\Bin>if "C:\Program Files\Java\jdk1.7.0_67\bin\keytool.ex
e" == "" echo Must have keytool.exe from JDK in PATH && goto :done

D:\ScreenConnect\ReSign\Bin>for %A in (jarsigner.exe) do if "%~$PATH:A" == "" ec
ho Must have jarsigner.exe from JDK in PATH && goto :done

D:\ScreenConnect\ReSign\Bin>if "C:\Program Files\Java\jdk1.7.0_67\bin\jarsigner.
exe" == "" echo Must have jarsigner.exe from JDK in PATH && goto :done

D:\ScreenConnect\ReSign\Bin>for %A in (mage.exe) do if "%~$PATH:A" == "" echo Mu
st have mage.exe from .NET SDK in PATH && goto :done

D:\ScreenConnect\ReSign\Bin>if "" == "" echo Must have mage.exe from .NET SDK in
PATH && goto :done
Must have mage.exe from .NET SDK in PATH

D:\ScreenConnect\ReSign\Bin>pauseError: Resource has been moved or is unavailabl
e. Please contact the forum admin.
'pauseError:' is not recognized as an internal or external command,
operable program or batch file.
Alexander  
#28 Posted : Wednesday, October 15, 2014 2:45:14 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
You can change the PATH variable with:
Code:
set PATH=%PATH%;D:\ScreenConnect\ReSign\Bin

(though this will just change it temporarily for that command session)
ScreenConnect Team
ditkar  
#29 Posted : Monday, October 20, 2014 12:10:58 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Thanks, I have made some progress...

1. I was able to partially resign the client files for exes. See image1 and image2
[IMG=http://www.imagesup.net/?di=514138067750]image1[/IMG]
[IMG=http://www.imagesup.net/?di=314138068552]image2[/IMG]

2. I receive this error for jar setups
[img=http://www.imagesup.net/?di=414138068888]image3[/img]

Any suggestions on how to proceed next.

I tried the resigning of apps for 4.4 and 5.0 and I end up with the same problem.


Here is how I did.....

Code:
D:\ScreenConnect\ReSign>set PATH=%PATH%;D:\ScreenConnect\ReSign\Bin

D:\ScreenConnect\ReSign>resigner.cmd

D:\ScreenConnect\ReSign>for %A in (keytool.exe) do if "%~$PATH:A" == "" echo Mus
t have keytool.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "C:\Program Files\Java\jdk1.7.0_67\bin\keytool.exe" =
= "" echo Must have keytool.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>for %A in (jarsigner.exe) do if "%~$PATH:A" == "" echo M
ust have jarsigner.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "C:\Program Files\Java\jdk1.7.0_67\bin\jarsigner.exe"
 == "" echo Must have jarsigner.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>for %A in (mage.exe) do if "%~$PATH:A" == "" echo Must h
ave mage.exe from .NET SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "D:\ScreenConnect\ReSign\Bin44\mage.exe" == "" echo M
ust have mage.exe from .NET SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>for %A in (signtool.exe) do if "%~$PATH:A" == "" echo Mu
st have signtool.exe from Windows SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "D:\ScreenConnect\ReSign\Bin44\signtool.exe" == "" ec
ho Must have signtool.exe from Windows SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>set ARG_COUNT=0

D:\ScreenConnect\ReSign>for %x in ((null)) do set /A ARG_COUNT+=1

D:\ScreenConnect\ReSign>if "0" == "0" (
set /p PFX_FILE_PATH=Enter PFX file path:
 set /p PFX_PASSWORD=Enter PFX password:
 set /p BIN_DIRECTORY_PATH=Enter Bin directory path:
)  else (if "0" == "3" (
set PFX_FILE_PATH=
 set PFX_PASSWORD=
 set BIN_DIRECTORY_PATH=
)  else (echo usage: resigner [pfxFilePath] [pfxFilePassword] [screenConnectBinD
irectoryPath]   && goto :done ) )
Enter PFX file path:D:\ScreenConnect\ReSign\Xxxxxxxx.p12
Enter PFX password:$$$$$$$$$$
Enter Bin directory path:R:\Bin

D:\ScreenConnect\ReSign>rem Grabbing the name of the cert from the PFX

D:\ScreenConnect\ReSign>keytool.exe -list -storetype pkcs12 -keystore "D:\Screen
Connect\ReSign\Xxxxxxxx.p12" -storepass "$$$$$$$$$$" -v   | C:\Windows\System32\
find "Alias"  1>tempalias.txt

D:\ScreenConnect\ReSign>for /F "tokens=2*" %A in (tempalias.txt) do set ALIAS=%B


D:\ScreenConnect\ReSign>set ALIAS=Xxxxxx, inc.'s OoooO.com, inc. id

D:\ScreenConnect\ReSign>echo Using certificate: Xxxxxx, inc.'s OoooO.com, inc.
 id
Using certificate: Xxxxxx, inc.'s OoooO.com, inc. id

D:\ScreenConnect\ReSign>rem Make a jks keystore so we can import from java

D:\ScreenConnect\ReSign>rem Probably could figure out how to jarsign directly fr
om pfx, but save that for another day

D:\ScreenConnect\ReSign>keytool.exe -importkeystore -srckeystore "D:\ScreenConne
ct\ReSign\Xxxxxxxx.p12" -srcstoretype pkcs12 -srcstorepass "$$$$$$$$$$" -srcalia
s "Xxxxxx, inc.'s OoooO.com, inc. id" -destkeystore tempkeystore.jks -deststor
etype jks -deststorepass "$$$$$$$$$$AAAAAA" -destkeypass "$$$$$$$$$$AAAAAA" -desta
lias default

D:\ScreenConnect\ReSign>rem Update and sign each file type

D:\ScreenConnect\ReSign>for %A in (R:\Bin\*.exe) do signtool.exe sign /f "D:\Scr
eenConnect\ReSign\Xxxxxxxx.p12" /p "$$$$$$$$$$" "%A"

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\Xxxxxxxx.
p12" /p "$$$$$$$$$$" "R:\Bin\Elsinore.ScreenConnect.Client.exe"
Done Adding Additional Store
Successfully signed: R:\Bin\Elsinore.ScreenConnect.Client.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\Xxxxxxxx.
p12" /p "$$$$$$$$$$" "R:\Bin\Elsinore.ScreenConnect.ClientBootstrap.exe"
Done Adding Additional Store
Successfully signed: R:\Bin\Elsinore.ScreenConnect.ClientBootstrap.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\Xxxxxxxx.
p12" /p "$$$$$$$$$$" "R:\Bin\Elsinore.ScreenConnect.ClientService.exe"
Done Adding Additional Store
Successfully signed: R:\Bin\Elsinore.ScreenConnect.ClientService.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\Xxxxxxxx.
p12" /p "$$$$$$$$$$" "R:\Bin\Elsinore.ScreenConnect.ClientSetup.exe"
Done Adding Additional Store
Successfully signed: R:\Bin\Elsinore.ScreenConnect.ClientSetup.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\Xxxxxxxx.
p12" /p "$$$$$$$$$$" "R:\Bin\Elsinore.ScreenConnect.Service.exe"
Done Adding Additional Store
Successfully signed: R:\Bin\Elsinore.ScreenConnect.Service.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\Xxxxxxxx.
p12" /p "$$$$$$$$$$" "R:\Bin\Elsinore.ScreenConnect.WindowsClient.exe"
Done Adding Additional Store
Successfully signed: R:\Bin\Elsinore.ScreenConnect.WindowsClient.exe

D:\ScreenConnect\ReSign>for %A in (R:\Bin\*.manifest) do mage.exe -Update "%A"
 1>NUL  && mage.exe -Sign "%A" -Password "$$$$$$$$$$" -CertFile "D:\ScreenConnect
\ReSign\Xxxxxxxx.p12"

D:\ScreenConnect\ReSign>mage.exe -Update "R:\Bin\Elsinore.ScreenConnect.Client.m
anifest"   1>NUL  && mage.exe -Sign "R:\Bin\Elsinore.ScreenConnect.Client.manife
st" -Password "$$$$$$$$$$" -CertFile "D:\ScreenConnect\ReSign\Xxxxxxxx.p12"
Elsinore.ScreenConnect.Client.manifest successfully signed

D:\ScreenConnect\ReSign>for %A in (R:\Bin\*.application) do mage.exe -Update "%A
" -AppManifest "%~dpnA.manifest"   && mage.exe -Sign "%A" -Password "$$$$$$$$$$"
-CertFile "D:\ScreenConnect\ReSign\Xxxxxxxx.p12"

D:\ScreenConnect\ReSign>mage.exe -Update "R:\Bin\Elsinore.ScreenConnect.Client.a
pplication" -AppManifest "R:\Bin\Elsinore.ScreenConnect.Client.manifest"   && ma
ge.exe -Sign "R:\Bin\Elsinore.ScreenConnect.Client.application" -Password "$$$$$
$$$$" -CertFile "D:\ScreenConnect\ReSign\Xxxxxxxx.p12"
Elsinore.ScreenConnect.Client.application successfully updated
Elsinore.ScreenConnect.Client.application successfully signed

D:\ScreenConnect\ReSign>for %A in (R:\Bin\*.jar) do jarsigner.exe -keystore temp
keystore.jks -storetype jks -storepass "$$$$$$$$$$AAAAAA" "%A" default   && echo
Signed jar: %A

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$$AAAAAA" "R:\Bin\Elsinore.ScreenConnect.Client.exe.jar" defa
ult   && echo Signed jar: R:\Bin\Elsinore.ScreenConnect.Client.exe.jar
jar signed.

Warning:
The signer's certificate chain is not validated.
The signer certificate will expire within six months.
No -tsa or -tsacert is provided and this jar is not timestamped. Without a times
tamp, users may not be able to validate this jar after the signer certificate's
expiration date (2014-11-15) or after any future revocation date.
Signed jar: R:\Bin\Elsinore.ScreenConnect.Client.exe.jar

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$$AAAAAA" "R:\Bin\Elsinore.ScreenConnect.Client.jar" default
  && echo Signed jar: R:\Bin\Elsinore.ScreenConnect.Client.jar
jar signed.

Warning:
The signer's certificate chain is not validated.
The signer certificate will expire within six months.
No -tsa or -tsacert is provided and this jar is not timestamped. Without a times
tamp, users may not be able to validate this jar after the signer certificate's
expiration date (2014-11-15) or after any future revocation date.
Signed jar: R:\Bin\Elsinore.ScreenConnect.Client.jar

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$$AAAAAA" "R:\Bin\Elsinore.ScreenConnect.ClientBootstrap.jar"
 default   && echo Signed jar: R:\Bin\Elsinore.ScreenConnect.ClientBootstrap.jar

jar signed.

Warning:
The signer's certificate chain is not validated.
The signer certificate will expire within six months.
No -tsa or -tsacert is provided and this jar is not timestamped. Without a times
tamp, users may not be able to validate this jar after the signer certificate's
expiration date (2014-11-15) or after any future revocation date.
Signed jar: R:\Bin\Elsinore.ScreenConnect.ClientBootstrap.jar

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$$AAAAAA" "R:\Bin\Elsinore.ScreenConnect.Core.jar" default
&& echo Signed jar: R:\Bin\Elsinore.ScreenConnect.Core.jar
jar signed.

Warning:
The signer's certificate chain is not validated.
The signer certificate will expire within six months.
No -tsa or -tsacert is provided and this jar is not timestamped. Without a times
tamp, users may not be able to validate this jar after the signer certificate's
expiration date (2014-11-15) or after any future revocation date.
Signed jar: R:\Bin\Elsinore.ScreenConnect.Core.jar

D:\ScreenConnect\ReSign>del tempkeystore.jks

D:\ScreenConnect\ReSign>del tempalias.txt

D:\ScreenConnect\ReSign>pauseError: Resource has been moved or is unavailable. P
lease contact the forum admin.
'pauseError:' is not recognized as an internal or external command,
operable program or batch file.

D:\ScreenConnect\ReSign>
[img]null[/img]
Alexander  
#30 Posted : Monday, October 20, 2014 8:47:20 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
For the second one, you should be able to change that by editing Elsinore.ScreenConnect.Client.application and replacing "ScreenConnect Client" with whatever you want to have there, then running the script again.
The third image seems more like a general Java issue than something caused by the signing.
ScreenConnect Team
ditkar  
#31 Posted : Thursday, January 1, 2015 6:43:44 AM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
I am trying to sign SC 5.0 files... I am getting few errors... Could someone check???

Code:


D:\ScreenConnect\ReSign>set PATH=%PATH%;D:\ScreenConnect\ReSign

D:\ScreenConnect\ReSign>resigner.cmd

D:\ScreenConnect\ReSign>for %A in (keytool.exe) do if "%~$PATH:A" == "" echo Mus
t have keytool.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "C:\Program Files\Java\jdk1.7.0_67\bin\keytool.exe" =
= "" echo Must have keytool.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>for %A in (jarsigner.exe) do if "%~$PATH:A" == "" echo M
ust have jarsigner.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "C:\Program Files\Java\jdk1.7.0_67\bin\jarsigner.exe"
 == "" echo Must have jarsigner.exe from JDK in PATH   && goto :done

D:\ScreenConnect\ReSign>for %A in (mage.exe) do if "%~$PATH:A" == "" echo Must h
ave mage.exe from .NET SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "D:\ScreenConnect\ReSign\mage.exe" == "" echo Must ha
ve mage.exe from .NET SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>for %A in (signtool.exe) do if "%~$PATH:A" == "" echo Mu
st have signtool.exe from Windows SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>if "D:\ScreenConnect\ReSign\signtool.exe" == "" echo Mus
t have signtool.exe from Windows SDK in PATH   && goto :done

D:\ScreenConnect\ReSign>set ARG_COUNT=0

D:\ScreenConnect\ReSign>for %x in ((null)) do set /A ARG_COUNT+=1

D:\ScreenConnect\ReSign>if "0" == "0" (
set /p PFX_FILE_PATH=Enter PFX file path:
 set /p PFX_PASSWORD=Enter PFX password:
 set /p BIN_DIRECTORY_PATH=Enter Bin directory path:
)  else (if "0" == "3" (
set PFX_FILE_PATH=
 set PFX_PASSWORD=
 set BIN_DIRECTORY_PATH=
)  else (echo usage: resigner [pfxFilePath] [pfxFilePassword] [screenConnectBinD
irectoryPath]   && goto :done ) )
Enter PFX file path:D:\ScreenConnect\ReSign\NewCodeSignCert.spc
Enter PFX password:$$$$$$$$$
Enter Bin directory path:Q:\Bin

D:\ScreenConnect\ReSign>rem Grabbing the name of the cert from the PFX

D:\ScreenConnect\ReSign>keytool.exe -list -storetype pkcs12 -keystore "D:\Screen
Connect\ReSign\LesterincNew.spc" -storepass "$$$$$$$$$" -v   | C:\Windows\System
32\find "Alias"  1>tempalias.txt

D:\ScreenConnect\ReSign>for /F "tokens=2*" %A in (tempalias.txt) do set ALIAS=%B


D:\ScreenConnect\ReSign>echo Using certificate:
Using certificate:

D:\ScreenConnect\ReSign>rem Make a jks keystore so we can import from java

D:\ScreenConnect\ReSign>rem Probably could figure out how to jarsign directly fr
om pfx, but save that for another day

D:\ScreenConnect\ReSign>keytool.exe -importkeystore -srckeystore "D:\ScreenConne
ct\ReSign\LesterincNew.spc" -srcstoretype pkcs12 -srcstorepass "$$$$$$$$$" -srca
lias "" -destkeystore tempkeystore.jks -deststoretype jks -deststorepass "$um700
320AAAAAA" -destkeypass "$$$$$$$$$AAAAAA" -destalias default
keytool error: java.io.IOException: DER input, Integer tag error

D:\ScreenConnect\ReSign>rem Update and sign each file type

D:\ScreenConnect\ReSign>for %A in (Q:\Bin\*.exe) do signtool.exe sign /f "D:\Scr
eenConnect\ReSign\LesterincNew.spc" /p "$$$$$$$$$" "%A"

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\LesterincN
ew.spc" /p "$$$$$$$$$" "Q:\Bin\Elsinore.ScreenConnect.Client.exe"
Done Adding Additional Store
Successfully signed: Q:\Bin\Elsinore.ScreenConnect.Client.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\LesterincN
ew.spc" /p "$$$$$$$$$" "Q:\Bin\Elsinore.ScreenConnect.ClientBootstrap.exe"
Done Adding Additional Store
Successfully signed: Q:\Bin\Elsinore.ScreenConnect.ClientBootstrap.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\LesterincN
ew.spc" /p "$$$$$$$$$" "Q:\Bin\Elsinore.ScreenConnect.ClientService.exe"
Done Adding Additional Store
Successfully signed: Q:\Bin\Elsinore.ScreenConnect.ClientService.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\LesterincN
ew.spc" /p "$$$$$$$$$" "Q:\Bin\Elsinore.ScreenConnect.ClientSetup.exe"
Done Adding Additional Store
Successfully signed: Q:\Bin\Elsinore.ScreenConnect.ClientSetup.exe

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\LesterincN
ew.spc" /p "$$$$$$$$$" "Q:\Bin\Elsinore.ScreenConnect.Service.exe"
Done Adding Additional Store
SignTool Error: The file is being used by another process.
SignTool Error: An error occurred while attempting to sign: Q:\Bin\Elsinore.Scre
enConnect.Service.exe

Number of errors: 1

D:\ScreenConnect\ReSign>signtool.exe sign /f "D:\ScreenConnect\ReSign\LesterincN
ew.spc" /p "$$$$$$$$$" "Q:\Bin\Elsinore.ScreenConnect.WindowsClient.exe"
Done Adding Additional Store
Successfully signed: Q:\Bin\Elsinore.ScreenConnect.WindowsClient.exe

D:\ScreenConnect\ReSign>for %A in (Q:\Bin\*.manifest) do mage.exe -Update "%A"
 1>NUL  && mage.exe -Sign "%A" -Password "$$$$$$$$$" -CertFile "D:\ScreenConnect
\ReSign\LesterincNew.spc"

D:\ScreenConnect\ReSign>mage.exe -Update "Q:\Bin\Elsinore.ScreenConnect.Client.m
anifest"   1>NUL  && mage.exe -Sign "Q:\Bin\Elsinore.ScreenConnect.Client.manife
st" -Password "$$$$$$$$$" -CertFile "D:\ScreenConnect\ReSign\LesterincNew.spc"
Unable to open certificate "D:\ScreenConnect\ReSign\LesterincNew.spc":
The index value is not valid.

D:\ScreenConnect\ReSign>for %A in (Q:\Bin\*.application) do mage.exe -Update "%A
" -AppManifest "%~dpnA.manifest"   && mage.exe -Sign "%A" -Password "$$$$$$$$$"
-CertFile "D:\ScreenConnect\ReSign\LesterincNew.spc"

D:\ScreenConnect\ReSign>mage.exe -Update "Q:\Bin\Elsinore.ScreenConnect.Client.a
pplication" -AppManifest "Q:\Bin\Elsinore.ScreenConnect.Client.manifest"   && ma
ge.exe -Sign "Q:\Bin\Elsinore.ScreenConnect.Client.application" -Password "$um70
0320" -CertFile "D:\ScreenConnect\ReSign\LesterincNew.spc"
Elsinore.ScreenConnect.Client.application successfully updated
Unable to open certificate "D:\ScreenConnect\ReSign\LesterincNew.spc":
The index value is not valid.

D:\ScreenConnect\ReSign>for %A in (Q:\Bin\*.jar) do jarsigner.exe -keystore temp
keystore.jks -storetype jks -storepass "$$$$$$$$$AAAAAA" "%A" default   && echo
Signed jar: %A

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$AAAAAA" "Q:\Bin\Elsinore.ScreenConnect.Client.exe.jar" defa
ult   && echo Signed jar: Q:\Bin\Elsinore.ScreenConnect.Client.exe.jar
jarsigner error: java.lang.RuntimeException: keystore load: D:\ScreenConnect\ReS
ign\tempkeystore.jks (The system cannot find the file specified)

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$AAAAAA" "Q:\Bin\Elsinore.ScreenConnect.Client.jar" default
  && echo Signed jar: Q:\Bin\Elsinore.ScreenConnect.Client.jar
jarsigner error: java.lang.RuntimeException: keystore load: D:\ScreenConnect\ReS
ign\tempkeystore.jks (The system cannot find the file specified)

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$AAAAAA" "Q:\Bin\Elsinore.ScreenConnect.ClientBootstrap.jar"
 default   && echo Signed jar: Q:\Bin\Elsinore.ScreenConnect.ClientBootstrap.jar

jarsigner error: java.lang.RuntimeException: keystore load: D:\ScreenConnect\ReS
ign\tempkeystore.jks (The system cannot find the file specified)

D:\ScreenConnect\ReSign>jarsigner.exe -keystore tempkeystore.jks -storetype jks
-storepass "$$$$$$$$$AAAAAA" "Q:\Bin\Elsinore.ScreenConnect.Core.jar" default
&& echo Signed jar: Q:\Bin\Elsinore.ScreenConnect.Core.jar
jarsigner error: java.lang.RuntimeException: keystore load: D:\ScreenConnect\ReS
ign\tempkeystore.jks (The system cannot find the file specified)

D:\ScreenConnect\ReSign>del tempkeystore.jks
Could Not Find D:\ScreenConnect\ReSign\tempkeystore.jks

D:\ScreenConnect\ReSign>del tempalias.txt

D:\ScreenConnect\ReSign>pauseError: Resource has been moved or is unavailable. P
lease contact the forum admin.
'pauseError:' is not recognized as an internal or external command,
operable program or batch file.

D:\ScreenConnect\ReSign>

Alexander  
#32 Posted : Friday, January 2, 2015 3:36:55 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
It looks like your PFX file is DER encoded rather than PEM encoded. It shouldn't be too difficult to convert it to PEM.
ScreenConnect Team
ditkar  
#33 Posted : Monday, January 5, 2015 11:46:25 AM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Thanks Alex, for showing me the right direction. My provider gave me this certificate in .spc file and I finally found a way to convert it to .p12. And I was able to sign the files. However there are few still concerns that I am listing out as below.


Concern #1:
The one with .jnlp, where I do see the Publisher as my Company Name but the Name of the application still says "ScreenConnect". Any idea on how to replace this string?

[img=UserPostedImage]SC jnlp[/img]

Concern #2:
There are places where ScreenConnect is not fully replaced with the company name?

Concern #3:
Client Setup file when downloading gives me this error message.
[img=UserPostedImage]dnt[/img]

[img=UserPostedImage]dnt2[/img]


Concern #4:
Part of the bootstrap client still says ScreenConnect.

[img=UserPostedImage]bootstrap client[/img]



Thanks,

Edited by user Monday, January 5, 2015 12:13:23 PM(UTC)  | Reason: Not specified

Alexander  
#34 Posted : Monday, January 5, 2015 5:19:44 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Hmm, the jnlp should be using the client resources there; could you attach a jnlp file, perhaps? (Edit: actually it turns out this is something I can reproduce easily: even though the jnlp's <title> element doesn't say ScreenConnect, that confirmation dialog still does. I'm not sure where it's getting that from, really.) (Edit2: It might be getting it from Application-Name in the jar file's META-INF\MANIFEST.MF. You could try changing that and resigning again. (jar files are just zip files and the MANFEST.MF is a text file, so that shouldn't be too difficult.))

That error message doesn't really seem like it's related to the resigning, though.

Edited by user Monday, January 5, 2015 5:55:20 PM(UTC)  | Reason: Not specified

ScreenConnect Team
ditkar  
#35 Posted : Wednesday, January 7, 2015 2:28:04 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
It still didnt resolve the jnlp issue.
Alexander  
#36 Posted : Wednesday, January 7, 2015 8:55:28 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Huh. When I tried changing Application-Name in our build script, it showed either that or the application name in the jnlp's <title>. I'm not sure that that's the same as changing Application-Name in MANIFEST.MF and resigning, but I'd think it would be.
Though it looks like the first time you click on a jnlp, it uses the old name; it isn't until the second time that the new one takes effect.
(Also, it seems to be Elsinore.ScreenConnect.Client.jar and Elsinore.ScreenConnect.ClientBootstrap.jar that affect it, rather than Elsinore.ScreenConnect.Core.jar.)
ScreenConnect Team
ditkar  
#37 Posted : Tuesday, January 13, 2015 12:13:00 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
I am still not able to fix the above issues. Why would I get "You do not have privileges" when I try to install using client setup?
Alexander  
#38 Posted : Tuesday, January 13, 2015 3:42:56 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
I guess that error message suggests that it's because you aren't an administrator. Are you? If not, are you able to try it as an administrator?
ScreenConnect Team
estevo  
#39 Posted : Tuesday, February 10, 2015 9:43:29 AM(UTC)
estevo


Rank: Newbie

Joined: 2/10/2015(UTC)
Posts: 1
Germany

Hi

I was wondering whether anyone has managed to get the script working with Linux? We have installed Screen Connect in a subdomain and that subdomain does have its own SSL cert.

Could anyone post a step by step guide on how we could make it work in Linux.

Thank you.

cheers

Ashar
Alexander  
#40 Posted : Wednesday, February 11, 2015 8:53:37 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Probably the easiest thing to do would be to copy your Bin directory and PFX file to a Windows machine, run the script, and then copy it back. (WinSCP is a good utility for copying files between Windows and Linux.)
ScreenConnect Team
ditkar  
#41 Posted : Friday, August 14, 2015 10:40:59 AM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
I was hoping to see if the new release completely support code signing, but I still see the following.

This one is when I use the WebStartBootStrap. How can I replace the name "ScreenConnect" with something else?
WebStartBootStrap

This one is when I use WindowsClientSetup. How can I replace the name "ScreenConnect" with something else?
WindowsClientSetup

Any suggestions?
Alexander  
#42 Posted : Friday, August 14, 2015 3:52:33 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
For the WebStartBootstrap, if my previous suggestion didn't work, it doesn't look like you can change it.

For the WindowsClientSetup, you can build an .msi file and then edit it with Orca/SuperOrca and change the ProductName property.
—Wait, that's the WindowsSelector, not the unattended client, isn't it. In that case… you could maybe edit it programmatically, though you'd probably have to change it to use the .msi installer rather than the .exe to be able to do that (in SC.launch.js, change SC.context.installerHandlerPath.replace('*', 'exe')).
(Just editing the .msi file in the Bin directory won't work, since it'll get overwritten.)
ScreenConnect Team
ditkar  
#43 Posted : Monday, January 25, 2016 5:59:16 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Is this something handled painlessly in v5.5? Or I still need to re-sign all files the same old way?
Alexander  
#44 Posted : Monday, January 25, 2016 8:03:32 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Still have to re-sign, I believe.
ScreenConnect Team
ditkar  
#45 Posted : Friday, August 19, 2016 11:41:44 AM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Posting the same question to check if any progress has been made here?

UserPostedImage

UserPostedImage

Per the description here, SC can be completely customized. Is it possible to replace the "ScreenConnect" keyword from the screenshots?

Edited by user Friday, August 19, 2016 11:47:14 AM(UTC)  | Reason: Not specified

Alexander  
#46 Posted : Friday, August 19, 2016 4:06:53 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Just to be clear, that's from the ClickOnceBootstrap launcher? Are both screenshots from the same launch, or are they separate?
ScreenConnect Team
ditkar  
#47 Posted : Friday, August 19, 2016 4:43:03 PM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Both the screenshots are from ScreenConnect.Client.exe
Alexander  
#48 Posted : Friday, August 19, 2016 6:15:57 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Editing ScreenConnect.client.application and changing "ScreenConnect Client" should change those.
ScreenConnect Team
ditkar  
#49 Posted : Monday, August 22, 2016 8:37:03 AM(UTC)
ditkar


Rank: Advanced Member

Joined: 7/9/2014(UTC)
Posts: 84
Man
United States

Thanks: 8 times
Thanks Alex, that worked for Screenconnect.Client.exe.

However, I still show the application name as "Screenconnnect Client" for:

1. ScreenConnect.ClientSetup.exe
UserPostedImage


2. ScreenConnect.ClientBootstrap.jnlp
UserPostedImage
Alexander  
#50 Posted : Monday, August 22, 2016 2:33:25 PM(UTC)
Alexander


Rank: Administration

Medals: Level 3: Shirt off your back! Received 25 Thanks!

Joined: 7/23/2013(UTC)
Posts: 716
Man
Location: Raleigh, NC

Was thanked: 66 time(s) in 63 post(s)
Yeah, those are still in the same situation as they were before.
ScreenConnect Team
Users browsing this topic
2 Pages12>
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.