How to add a digital signature to ActiveX)

How to add a digital signature to ActiveX

Method 1:

Apply for a one-year digital certificate from the China certificate network (for only one year). Website: www.ca365.com

For specific methods, see: http://www.ca365.com/handbook7.asp

 

Method 2:

A toolkit includes the following software:
Makecert.exe creates a certificate in cer format, that is, an X.509 Certificate. You can also create a private key.
Cert2spc.exe converts a certificate in cer format to a certificate in SPC format. Net; % '; y} teaches I ^ X: iak % proprietary RQ that is, PKCS #7 certificates
Signcode.exe sign the certificate to OCX
Chktrust.exe check whether OCX after signing the certificate is correct
There is also a certmgr.exe that mentions jtrgg8z; B is used to manage certificates. You can export root. cer from here,
This certificate is written in many articles on the Internet, but cannot be found in the installation disk of VC. Actually, no
It does not matter. These software can be found in the installation disk of VC.

The procedure is as follows:
1. Create a certificate file:
Makecert/SV "record. PVK"/N "cn = company name, E = Email, O = Author" dream. Cer
Here, record. PVK indicates the name of the newly created private key.
Dreamcaptial is the name of the company you want to display
Dream. CER is the last Certificate file name you have created
Fill in the information according to your requirements,

Network 'zy * g =, lij network. yod soft M-V for breeding 6 Country A rational tya Education Network # ymc education N, for the final get record. PVK and dream. CER files.
The password of the private key must be entered during running.
Error.

2. Convert the CER format to the SPC format (which can be omitted)
Cert2spc dream. Cer dream. SPC
Obtain the dream. SPC file.

3. Sign OCX
When I run signcode, I did not test the command line. I implemented it through the interface.
After signcode is run, the digital signature wizard appears. First, select the OCX you want to sign,
The signature option is displayed after the next step. One is typical and the other is custom. Select custom,
In this way, select a certificate from the file,

2q @ 9O. Education: network [(Network 9 xhtb

Select the previously created dream. SPC, and the next step is
Select the private key file, select record. PVK, enter the private key protection password, and select
The column algorithm is generally used with MD5. The next step is to select another certificate, and then go directly to the next step,
Enter the declaration of this control. When you use IE to browse, the certificate description will pop up,
The next step is to stamp the timestamp. I won't, but the next step is done.

4. Check whether chktrust is correct.
Chktrust-V recordproj. ocx

In this way, a test certificate is obtained.
Make sure that ocx can pop up a window during ie browsing and ask if you want to install it,
Instead of directly disabling it.