Re: Sign Windows VMs

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Re: Sign Windows VMs

EstebanLM
we are working on this, but for some weird reasons (including the fact I’m not so fluent on windows anymore ;) ) we haven’t fixed the problem :P

but well, the idea is to sign PharoVM for windows as we do it for macOS (we already have a certificate for Pharo provided by INRIASoft)

so… it will be there… sooner than later :)

cheers,
Esteban

> On 15 May 2018, at 01:14, <[hidden email]> <[hidden email]> wrote:
>
> Hi!
>
> I am using Pharo in a company network under a firewall, an antivirus, and windows, and each day I have an issue with some parts of the Pharo application that are recognized as a threat.  So, I cannot download it or execute it straightforwardly.
>
> Today was this one:
>
> [https://cdn.discordapp.com/attachments/365850577340727296/445688856948506624/unknown.png]
> Another day was the Cairo Dll where a "Veil Evasion Payload" has been detected.
>
> And some people has encounter the same kind of issues:
>
>  *   https://github.com/OpenSmalltalk/opensmalltalk-vm/issues/152
>  *   https://pharo.fogbugz.com/f/cases/20500/WindowsDefender-consider-SqueakSSL-dll-as-a-virus-and-delete-it
>
> It seems that the solution is to sign the VM with Authenticode, but for this, one needs to acquire a certificate (which is, of course, not free).
> Has the community such a certificate? Maybe the same that for MacOS?
> Would someone configure the VM builds to automatically sign them? (I can spend some time for this if needed)
>
> TIA,
>
> Cheers,
> Vincent
>
> <winmail.dat>