mirror of
https://github.com/amidaware/tacticalrmm.git
synced 2026-04-26 15:05:57 +03:00
[GH-ISSUE #1027] I have my own Extended Code Sign Certificate #631
Labels
No labels
In Process
bug
bug
dev-triage
documentation
duplicate
enhancement
fixed
good first issue
help wanted
integration
invalid
pull-request
question
requires agent update
security
ui tweak
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/tacticalrmm#631
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @smartekIT on GitHub (Mar 27, 2022).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1027
hi,
I have my own Extended code sign certificate, Can I use that to code sign agents?
@dinger1986 commented on GitHub (Mar 27, 2022):
In what context? If you have a cert you should be able to sign any executable
@smartekIT commented on GitHub (Mar 27, 2022):
yes, I know, but for example meshcentral agent could adopt my certificate so any generated agent .exe will get signed. so with this project can we generate the agents then sign them then upload them back to the server, so when download happen it will be already code signed agents. ?
@smartekIT commented on GitHub (Mar 27, 2022):
my understanding here that any agent in this project will be downloaded but not signed. unless we use your certificate process to let our server retrieve the agent singed at your servers. am i right?
so the question is, when we have our own certificate, how can we sign our server agents without having to reach to your servers or github to download a signed certificate from yours?
@dinger1986 commented on GitHub (Mar 27, 2022):
Sign the agent, upload it somewhere then use the powershell install (you will see where it grabs the executables from and replace those urls with your own) to install it on client computers.
That's how I would do it anyway
@smartekIT commented on GitHub (Mar 27, 2022):
thanks, based on what you said we can't just adjust the files which work Using a deployment link agent . or even the Dynamically generated executable. the only option we have is powershell installation.
@silversword411 commented on GitHub (Mar 27, 2022):
Why are you trying to do your own code signing?
@smartekIT commented on GitHub (Mar 27, 2022):
hi, simply because I already have my own certificate which I normally use with my other meshcentral.
@silversword411 commented on GitHub (Mar 28, 2022):
I don't see this being something that's going to be supported. Closing, can reopen if dev's want to re-visit