Kinook Software Forums

Go Back   Kinook Software Forums > Visual Build Professional > [VBP] Suggestions

Thread Tools Rate Thread Display Modes
Old 06-05-2006, 12:56 PM
SHatfield SHatfield is online now
Registered User
Join Date: 06-05-2006
Posts: 1
Build Script password protection

I have a "Sign Code" build step for signing our compiled setup.exe with our Verisign certificate, and I noticed that it is in clear text in the build script. Anyone with access to the build script can see what our cert password is. This isn't a terrible thing, but I would like for VBP to encrypt the password into the build script so that we don't have to worry about this anymore.

Steven Hatfield
MassMutual Corporation
Reply With Quote
Old 06-05-2006, 02:32 PM
kinook kinook is online now
Join Date: 03-06-2001
Location: Colorado
Posts: 5,913
If you store your signing certificate in the Windows certificate store, you don't need specify a password on the Sign Code action [1].

Another option would be to store the password in a global macro instead of the .bld file, and reference that macro from the password field. Then only someone with access to the machine where the global macro has been added will have access to the password. You could also store it there encrypted, but VBP won't currently do that for you.

We do intend to provide encryption capabilities in a future release (most likely a level with hard-coded key and another requiring the user to provide a password to unencrypt/open/build; since unless VBP prompts for a password to unencrypt the .bld file, any encrypting that it does will just amount to security through obscurity [2]). But even this doesn't really eliminate the problem, since *that* password still has to be stored and provided in order to build in an automated fashion.


Admin note: Implemented in v7
Reply With Quote

Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

All times are GMT -5. The time now is 07:35 AM.

Copyright 1999-2022 Kinook Software, Inc.