×

First time here?

You are looking at the most recent posts. You may also want to check out older archives. Please leave a comment, ask a question and consider subscribing to the latest posts via RSS or email. Thank you for visiting!

One of the new features in Silverlight 4 is the ability to sign your XAP applications so that your out-of-browser trusted applications look more friendly (trusted) to your users, they come from a verified publisher, and they can take advantage of the auto-update APIs in Silverlight.

If you don’t know what I’m talking about, here’s some resources for some background:

Basically if you are writing a Silverlight 4 trusted application, you WANT to be signing your XAPs.  The XAP sign process uses the normal Authenticode process for code signing. 

Thanks to our friends at GoDaddy, they want you to sign your apps as well and have them delivered from a verified publisher!  They are providing Silverlight developers a 50% discount on their code signing certificates for XAP signing!  If you don’t have a code signing certificate, now is the time!

To participate in this offer, be prepared to have all your information ready.  Certificates are issued to individuals/organizations.  It is much more of a verification process than something like an SSL web certificate.  In fact, the process actually involves human interaction!  You will be required to verify your information on your submission and perhaps be required to provide documentation of verification (if you are an organization readily found on the web, this usually isn’t a problem).  Follow the steps carefully and specifically.  I also recommend using Internet Explorer to go through the process to be safe.  Additionally, you will only be able to pick up your certificate from the machine you requested it on…so don’t pave that machine until you get it :-).

To take advantage of this offer, visit the GoDaddy code signing area and start the process.  You can choose a 1- or 2-year code signing certificate to apply this discount (might as well go for the 2 years so you maximize the discount).  Add the code signing certificate to your shopping cart then add this discount code in the promocode area: MSSILVER.  This will apply the 50% (of regular rates) to the 1- or 2-year code signing certs in your basket. 

Then complete your purchase.  Once complete you’ll receive email instructions on how to redeem the credit you purchased and start the verification process.  Be patient…this is not a 5-minute process.  In fact, in some cases it might take a few days to complete the verification process.

This offer is only good from 20-April-2010 until 20-May-2010 and only on 1- or 2-year code signing certificates, so act quick.  This is a great chance to get a well-known certificate authority code signing certificate.  During the order process you will be given the option to choose a Certificate Authority between GoDaddy and Star(something)…I recommend sticking with the GoDaddy CA on this one.

I hope you are able to take advantage of this offer.  This is a certificate that you can use to sign multiple applications…not just one, so it is definitely a worthwhile investment.  Make sure you timestamp your codesigns!!!

Hope this helps!


This work is licensed under a Creative Commons Attribution By license.


4/21/2010 5:18 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
You can get a cheaper one $40 for two years for unlimited certs from StartCom. Their root CA cert is part of the Microsoft root CA program, so any Vista/Win7 users will get it automatically....XP is was in last years root ca update.

For $40, they verify your ID and let you get unlimited class 2 certificates, including wildcard, multiple SAN's, email, code signing, etc.

No reason to pay big bucks for SSL....
4/21/2010 5:29 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
Oren -- please do NOT confuse these with *web* SSL certificates. This is a *code signing* authenticode certificate. They are two different items. Two completely different items. I don't see ANY inforamtion on StartCom's site about code signing -- again, this is completely different. Please do not confuse them.
4/21/2010 5:30 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
I know the difference -- StartCom has Code Signing certificates too once you have their class 2 validation. I have one and have used it with the authenticode tools and the verisign timestamp server.

It's really hard to beat the price :)
4/22/2010 7:29 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
Tim i tried to post a comment here last night and the system flagged me as possible spam... please find my post - it was not spam.
the StartCom site does offer codesigning certs it seems. i had to click thru some pages but i found it.
i have not used them and to be honest they sound kind of like a small operation so i am not sure if i trust them right now but at less than $50 bucks thats great if they are for real!

IMHO we need more competing on this as that's what got SSL certs down to the prices we have today. i can see some reasons why code certs should be more cost than ssl but not the amount they have been so far...
or the setup cost should be one time and the renewal should be way less as they have you on file and you have a track record over time with them.
4/22/2010 12:08 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
denny/oren/all - the StartSSL code signing certificates are not Microsoft Authenticode. I've just verified their certs do NOT work with XAP signing at present and working with our team to understand why and inform StartSSL (which I've also made aware).
4/22/2010 4:17 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
denny/oren/all -- I finally verified StartSSL's certs. It worked. Frankly, their process of issuance was *personally* a lot more cumbersome than others and I felt that my time wasn't saved. Also their advertisements of 'unlimited' are incorrect with regard to code signing -- you get one code sign cert.
4/24/2010 6:35 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
perhaps can you explain the problem tim?
I have used SSL and user auth certs but thus far i have not needed code-sign.
are you saying that the godaddy ones enable me to sign more applications ?

do we need a new cert for each application we publish?

perhaps a detailed guide needs to be done on the process ?
or is there one we need to see ?
4/26/2010 8:22 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
Denny/all -- I confirmed it works now. SSL/user-auth certs are different than CODE SIGNING certs. Code sign certs are basically digital signature verifications on code (DLL, EXE, etc.). Silverlight 4 added this new verification feature for XAPs for trusted out-of-browser applications. A single code-signing cert can be used across an organization to sign EXE, DLL, XAP, whatever. The two links above in the bullet list are the detailed guide on what needs to be done for trusted Silverlight applications (XAPS). As to seeing the result you can install the Facebook client http://bit.ly/facebookclient, the new eBay Simple Lister, or other trusted applications.
4/27/2010 12:59 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
Ward -- excellent point. I'm not sure if you timestamp your DLL assemblies in your scenario above, but would be interested to know if that helps. I'm not deep on the Authenticode/code-sign verfication process, but I know that timestamping helps keep the signed code valid beyond it's cert's expiration...I'd be curious if that helps the revocation check from stopping?

Anyway, back to XAPs. The main purpose of signing a XAP is to demonstrate to the user that this is from a trusted/verified publisher. It is the INSTALL mechanism that only checks for the cert and only does that at .Install() time from the app model. Once installed (and for future updates), the cert isn't needed/checked, because the user has trusted that XAP/origin. Make sense?
4/30/2010 8:52 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
Dan -- why can you only sign with you? They (ACME) would have to provide you with their certificate (PFX format) in order for you to enable signing using their cert (or they could do it after you deliver the xap). The machine thing I mentioned above was during the request process. A PFX exports the public/private key.
8/31/2010 5:33 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
Ward: there is a way to speed up without loose signing of dll/exe: add this section entry within your .exe.config:

<runtime>
<!--
.NET Framwork 2.0 SP1 or later (see http://support.microsoft.com/kb/945757/en-us) required
or Microsoft Hotfix (http://support.microsoft.com/kb/936707) required to make this setting
work.
Disables the CRL (certificate revocation list) checking during signed assembly loading and
so enables the service manager to finish the start of our service successfully in time.
-->
<generatePublisherEvidence enabled="false"/>
</runtime>
2/27/2011 3:38 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
I have been doing with these codex and I am very comfortable with this programing, I hope same is happening with all of us. closet doors Cheers
3/18/2011 3:33 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
GoDaddy is popular for offering such discounts and I think its a great effort to support Silver Light Developers. As another employee at HP, and given that Employee Relations is 19.5% of the total, I find it hard to believe that HP could overcome its horrible employee relations. Ask almost anyone who works here now and you will hear how bad it is. Becoming dental Hygienist Thanks
4/28/2011 12:54 PM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
GoDaddy is popular for offering such discounts and I think its a great effort to support Silver Light Developers.
download scream 4
download water for elephants
download fast five
6/7/2011 8:16 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
I like godaddy is very special to me because it was always happy.

laminate flooring
Gravatar
6/13/2011 3:12 AM | # re: Get a Silverlight XAP signing certificate for cheap thanks to GoDaddy
These kind of post are always inspiring and I prefer to read quality content so I happy to find many good point here in the post Sifter

 
Please add 7 and 1 and type the answer here:

All postings/content on this blog are provided "AS IS" with no warranties, and confer no rights. All entries in this blog are my opinion and don't necessarily reflect the opinion of my employer or sponsors. The content on this site is licensed under a Creative Commons Attribution By license.