Welcome, Guest Login

White listing of CodeSign Certificate Verification and Revocation URLs

Last Updated: Jun 27, 2016 02:51PM NZST

What are CodeSign Certificates?

CodeSign certificates are used for all our binary files. To verify the CodeSign certificates are correct and up to date, the machine running the binaries (e.g. dll or exe files) requires access to specific URLs and domains.


White list requirements

We use Comodo as our third party CodeSign certificate authority. The following URL’s are required to verify our Comodo certification:

http://crl.comodoca.com/COMODOExtendedValidationSecureServerCA.crl
http://crl.comodoca.com/COMODOCodeSigningCA2.crl
http://crt.comodoca.com/COMODOCodeSigningCA2.crt
http://ocsp.comodoca.com

The Comodo Certificate Authority further advise that exact names of CRLs and certificates can change. Due to this we advise to whitelist the following domains:

http://crl.comodoca.com/*
http://crt.comodoca.com/*
http://ocsp.comodoca.com/*


Testing access to the CodeSign Certificate Authority URL's

To check whether CodeSign Certificate Authority is working please follow these instructions:

  1. Go to a signed dll or exe, right click and select properties

  2. Go to the Digital Signatures tab, select the SnapComms certificate and click details


     

  3. In the details click View Certificate


     

  4. In the certificate go to details and click Copy to File

  5. Follow the wizard to export as DER certificate file, e.g. snap.cer


     

  6. Open a command line and CD to the folder where the snap.cer is located

  7. Use “certutil –URL snap.cer” to bring up the certutil GUI


     

  8. On the right hand side you will see a “Retrieve” box

  9. Use the three radio buttons to retrieve all the three different items: Certs, CRLS and OCSP. All of these should work instantly and succeed.

tech.support@snapcomms.com
http://assets2.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete