[Vm-dev] Sign Windows VMs

[Fabio Niephaus]

Hi Vincent,

On Tue, May 15, 2018 at 1:15 AM <Vincent.Blondeau at lamresearch.com> wrote:

>
>
> Hi!
>
>
>
> I am using Pharo in a company network under a firewall, an antivirus, and
> windows, and each day I have an issue with some parts of the Pharo
> application that are recognized as a threat.  So, I cannot download it or
> execute it straightforwardly.
>
>
>
> Today was this one:
>
>
>
> [image: image003.png]
>
> Another day was the Cairo Dll where a “Veil Evasion Payload” has been
> detected.
>

I agree, this is bad.


>
>
> And some people has encounter the same kind of issues:
>
>    - https://github.com/OpenSmalltalk/opensmalltalk-vm/issues/152
>    -
>    https://pharo.fogbugz.com/f/cases/20500/WindowsDefender-consider-SqueakSSL-dll-as-a-virus-and-delete-it
>
>
>
> It seems that the solution is to sign the VM with Authenticode, but for
> this, one needs to acquire a certificate (which is, of course, not free).
>
> Has the community such a certificate? Maybe the same that for MacOS?
>

No, we don't have such a certificate yet and we can't use the certificate
from Apple because it can only be used for macOS VMs unfortunately.


> Would someone configure the VM builds to automatically sign them? (I can
> spend some time for this if needed)
>

Of course, but first we need a certificate I'm afraid.

Cheers,
Fabio


>
>
> TIA,
>
>
>
> Cheers,
>
> Vincent
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/vm-dev/attachments/20180515/02f5fd2e/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 30475 bytes
Desc: not available
URL: <http://lists.squeakfoundation.org/pipermail/vm-dev/attachments/20180515/02f5fd2e/attachment-0001.png>