驱动程序代理以避免在 Windows 上重复进行代码签名
Windows 上的驱动程序应进行签名并提交给 Microsoft 进行代码签名，这是 64 位系统的要求。问题是，当你必须更新驱动程序时，你必须再次提交，每个版本一次。
是否可以构建某种代理或填充驱动程序，以便我只需签名并提交一次，然后将我的代码放在单独的模块中？
当然，我不能只移动 DLL 中的工作代码，因为动态加载的模块也必须进行签名才能在 64 位内核模式下执行。如果我将代码放入原始文件中，将其加载到内存中（在启用执行标志的情况下分配）然后执行它会怎样？还有其他想法吗？
Drivers on Windows should be signed and submitted to Microsoft for code signing and this is a requirement for 64 bit systems. The problem is that, when you have to update the driver, you have to submit it again, once for every release.
Is possible to build some kind of proxy or shim driver so that I have to sign and submit it only once, and then have my code in a separate module?
Of course I can't just move the working code in a DLL, as also dynamically loaded modules have to be signed in order to being executed in 64 bit kernel mode. What if I put my code in a raw file, load it in memory (allocated with execution flag enabled) and then execute it? Other ideas?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
您不必向 Microsoft 提交驱动程序。您必须使用交叉签名证书来签署您的驱动程序。这样你会得到一个导航屏幕，但这并不是禁止的！
为了做你想做的事，有过几次尝试。这些是“勉强”容忍的，但这些驱动程序可能随时被禁止。 （通过撤销您的签名）
该过程非常简单：
You don't have to submit a driver to Microsoft. You have to sign your driver with a cross-signing-certificate. You will get a nag screen this way, but this is not forbidden!
There were (are) several attempts to do just what you want to do. These are 'barely' tolerated, but these drivers may be banned at any time. (By revoking your signature)
The process is very easy :