无需证书颁发机构即可签署升级
我能否对我的 InstallScript 升级进行签名，以便在进行升级时进行一些验证，确保已安装的应用程序和升级都具有相同的签名。
我知道我可以使用证书颁发机构，但我需要这样做。 我知道有便宜的认证，但这与钱无关。
Can I have my InstallScript upgrades signed so that when an upgrade is taking place some validation will take place that the installed application and the upgrade both have the same signature.
I know I can use certification authority but I need to do it with out.
I know that there are cheap certification but this is not about the money.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
从代码内部进行验证是没有意义的。唯一可靠的验证是内置于外部实体（即操作系统）中的验证。在 Windows 中，这种机制称为 Authenticode，它涉及由证书颁发机构颁发的证书。 Java、Adobe 脚本和 Office 脚本也存在类似的机制，但它们都使用证书。因此，您（很可能是唯一的）选择是从 CA 之一获取一些便宜的代码签名证书。
Validation from inside your code makes no sense. The only reliable validation is the one built into the outside entity, i.e. the OS. In Windows such mechanism is named Authenticode, and it involves certificates, issued by Certificate Authorities. Similar mechanisms exist for Java, for Adobe scripting stuff and for Office scripts, yet all of them use certificates. So your (most likely the only) option is to get some cheap Code Signing certificates from one of CAs.