差異處
這裏顯示兩個版本的差異處。
|
cpp:certificate [2017/08/19 23:33] |
cpp:certificate [2023/06/25 09:48] (目前版本) |
||
|---|---|---|---|
| 行 1: | 行 1: | ||
| + | ====== Sign Certificate的問題 ====== | ||
| + | ===== Problem ===== | ||
| + | SHA1在2016後還可以使用嗎? | ||
| + | ===== Current Status ===== | ||
| + | 經過查詢一些文章後，目前得知: | ||
| + | - 如果timestamp在2016年以前可以繼續使用，但Win7與Win2008只能用到2020年1月14號。 | ||
| + | - 2016後建議使用SHA2，除了Win2003以前的系統。 | ||
| + | \\ | ||
| + | 目前測試Win10也可以使用2016年前sign的SHA1 driver。 | ||
| + | ===== Reference ===== | ||
| + | * [[https://www.globalsign.com/en/blog/microsoft-announces-updates-sha-1-code-signing-policy/|Microsoft announces updates to SHA-1 deprecation policy for Code Signing]] | ||
| + | * [[http://www.davidegrayson.com/signing/|Practical Windows Code and Driver Signing]] | ||
| + | * [[http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode-code-signing-and-timestamping.aspx|Windows Enforcement of Authenticode Code Signing and Timestamping]] | ||
| + | * [[http://security.stackexchange.com/questions/109629/deprecation-of-sha1-code-signing-certificates-on-windows|Deprecation of SHA1 code signing certificates on Windows]] | ||
| + | * [[https://blogs.msdn.microsoft.com/windows_hardware_certification/2015/04/01/driver-signing-changes-in-windows-10/|Driver Signing changes in Windows 10]] | ||
| + | * [[https://support.comodo.com/index.php?/Knowledgebase/Article/View/973/0/important-change-announcement---deprecation-of-sha-1| | ||
| + | Important change announcement - deprecation of SHA-1]] | ||
| + | ===== 其它 ===== | ||
| + | * [[cpp:dll:windows:sha2_issue_on_win7_2008|Sign Driver後無法正常啟動的問題 - SHA2]] | ||
