Code Sign EXE - 签名中是否包含我公司的详细地址?
正如我所看到的,在 Windows 中,EXE 文件的数字签名选项卡将显示公司的公司名称、城市名称和国家/地区名称。
用户能否从签名中找到公司的详细地址? OV和EV代码签名的情况是一样的吗?
谢谢。
As I can see, in Windows, the Digital Signature tab of an EXE file will show the Company Name, City Name, and Country Name of the company.
Is the user able to find the detailed address of the company from the signature? The situation is the same for OV and EV code signings?
Thank you.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
“数字签名”选项卡上显示的信息来自证书的“主题”字段。
该信息由公司在生成签名密钥时提供。
然后,这些密钥用于生成包含此信息的证书签名请求 (CSR) +公钥。
这就是传送给证书颁发机构的 CSR。
在验证 CSR 上的信息后,证书颁发机构将使用正确的密钥对证书进行数字签名。它不会添加有关公司的任何进一步信息,仅进行验证和签名。对于 OV 或 EV,主管机构对公司的验证过程会有所不同,但证书上显示的信息仍保留公司在 CSR 上提供的信息。
仅当生成签名密钥时提供了公司的详细地址时,才会显示该地址。
这不是证书上所需的典型信息,但公司可以选择在“主题”字段中添加个性化信息。
我不知道有哪个证书颁发机构需要 CSR 上的详细地址。
Information appearing on the Digital Signature tab come from the 'Subject' field of the certificate.
This information is provided by the company when signing keys are generated.
Then, those keys are used to generate a Certificate signing request (CSR) who contains this information + public key.
This is this CSR who is transmitted to the certificate authority.
The certificate authority will then sign digitally the certificate with his proper key, after validation of information present on the CSR. It will not add any further information about the company, only validate and sign. The validation process of the company by the authority will be different for OV or EV, but information present on the certificate stays those provided by the company on the CSR.
The detailed address of the company will appear only if it was provided when signing keys were generated.
This is not typical information required on a certificate, but the company can choose to add personalized information on the Subject field.
I am not aware of any certificate authority who require the detailed address on CSR.
我不相信,因为显示公司的详细信息不太安全。这可能会导致有人闯入或骚扰员工,而微软可能会受到指责,因为他们公开了公司的地址。
I don't believe so as it would not be very secure to display the company's detailed information. This could lead to someone breaking in or harassing workers where Microsoft could be blamed as they let the company's address go public.
有关使用 Visual Studio 制作的 exe 文件的数据是在属性中的 AssemblyInfo.cs(在 C# 项目中)内创建的。如果我没猜错的话,这就是能找到的所有数据。在 Visual Studio 中制作的每个应用程序都会有这样的东西,我不确定 C++ 项目,但它应该是这样的。
Data about an exe file made with visual studio is created like this inside the AssemblyInfo.cs (in C# projects) in the properties. This is all the data that can be found if I'm correct. Every application made in visual studio will have something like this, I'm not sure about C++ projects, but it should be something around the lines like this.