[GH-ISSUE #1027] I have my own Extended Code Sign Certificate #631

Closed
opened 2026-03-02 02:17:51 +03:00 by kerem · 8 comments
Owner

Originally created by @smartekIT on GitHub (Mar 27, 2022).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1027

hi,
I have my own Extended code sign certificate, Can I use that to code sign agents?

Originally created by @smartekIT on GitHub (Mar 27, 2022). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/1027 hi, I have my own Extended code sign certificate, Can I use that to code sign agents?
kerem closed this issue 2026-03-02 02:17:51 +03:00
Author
Owner

@dinger1986 commented on GitHub (Mar 27, 2022):

In what context? If you have a cert you should be able to sign any executable

<!-- gh-comment-id:1079907160 --> @dinger1986 commented on GitHub (Mar 27, 2022): In what context? If you have a cert you should be able to sign any executable
Author
Owner

@smartekIT commented on GitHub (Mar 27, 2022):

yes, I know, but for example meshcentral agent could adopt my certificate so any generated agent .exe will get signed. so with this project can we generate the agents then sign them then upload them back to the server, so when download happen it will be already code signed agents. ?

<!-- gh-comment-id:1079908458 --> @smartekIT commented on GitHub (Mar 27, 2022): yes, I know, but for example meshcentral agent could adopt my certificate so any generated agent .exe will get signed. so with this project can we generate the agents then sign them then upload them back to the server, so when download happen it will be already code signed agents. ?
Author
Owner

@smartekIT commented on GitHub (Mar 27, 2022):

my understanding here that any agent in this project will be downloaded but not signed. unless we use your certificate process to let our server retrieve the agent singed at your servers. am i right?
so the question is, when we have our own certificate, how can we sign our server agents without having to reach to your servers or github to download a signed certificate from yours?

<!-- gh-comment-id:1079909024 --> @smartekIT commented on GitHub (Mar 27, 2022): my understanding here that any agent in this project will be downloaded but not signed. unless we use your certificate process to let our server retrieve the agent singed at your servers. am i right? so the question is, when we have our own certificate, how can we sign our server agents without having to reach to your servers or github to download a signed certificate from yours?
Author
Owner

@dinger1986 commented on GitHub (Mar 27, 2022):

Sign the agent, upload it somewhere then use the powershell install (you will see where it grabs the executables from and replace those urls with your own) to install it on client computers.

That's how I would do it anyway

<!-- gh-comment-id:1079910225 --> @dinger1986 commented on GitHub (Mar 27, 2022): Sign the agent, upload it somewhere then use the powershell install (you will see where it grabs the executables from and replace those urls with your own) to install it on client computers. That's how I would do it anyway
Author
Owner

@smartekIT commented on GitHub (Mar 27, 2022):

thanks, based on what you said we can't just adjust the files which work Using a deployment link agent . or even the Dynamically generated executable. the only option we have is powershell installation.

<!-- gh-comment-id:1079911369 --> @smartekIT commented on GitHub (Mar 27, 2022): thanks, based on what you said we can't just adjust the files which work Using a deployment link agent . or even the Dynamically generated executable. the only option we have is powershell installation.
Author
Owner

@silversword411 commented on GitHub (Mar 27, 2022):

Why are you trying to do your own code signing?

<!-- gh-comment-id:1080000804 --> @silversword411 commented on GitHub (Mar 27, 2022): Why are you trying to do your own code signing?
Author
Owner

@smartekIT commented on GitHub (Mar 27, 2022):

Why are you trying to do your own code signing?

hi, simply because I already have my own certificate which I normally use with my other meshcentral.

<!-- gh-comment-id:1080030599 --> @smartekIT commented on GitHub (Mar 27, 2022): > Why are you trying to do your own code signing? hi, simply because I already have my own certificate which I normally use with my other meshcentral.
Author
Owner

@silversword411 commented on GitHub (Mar 28, 2022):

I don't see this being something that's going to be supported. Closing, can reopen if dev's want to re-visit

<!-- gh-comment-id:1080574340 --> @silversword411 commented on GitHub (Mar 28, 2022): I don't see this being something that's going to be supported. Closing, can reopen if dev's want to re-visit
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm#631
No description provided.