Hacker News new | past | comments | ask | show | jobs | submit login

> You buy a cert-

Where though? This is what I mean by place, I would like to know the best place people get this certificate.

Again, coming from Mac, I go to Apple, for Windows where do I go?




I can't find a good page from Microsoft listing acceptable CAs for regular certificates, but the driver signing page has a list for EV certificates:

https://docs.microsoft.com/en-us/windows-hardware/drivers/da...

I would buy a non-EV code signing cert from any of those. Look for discount codes, I know DigiCert used to have a pretty nice discount code, although it still cost a bunch of money; OTOH, DigiCert was very flexible in my experience, even when I was just a small customer; I think we had a maximum of 5 wildcard certificates at once, plus one code signing certificate, but they would issue all sorts of 'custom duplicates' and let me 'rename' a wildcard to a totally different domain to avoid buying a new wildcard, and were helpful with adjusting expirations for the sha-1 cert sunset. If the price isn't a huge barrier, I think they're cool; but I also understand if the price is a barrier.


I don't think it particularly matters, any of the major CAs offers codesigning certs (worth shopping around a bit for prices and promotions though, the prices vary massively with little obvious reason why they should)

https://github.com/mtrojnar/osslsigncode should be able to sign windows executables on a mac, but I haven't tried that personally




Consider applying for YC's Summer 2025 batch! Applications are open till May 13

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: