Microsoft timestamping

From: Rick Marsh Subject: timestamping, how to

Simply digitally signing code with a signing certificate works, but it will expire unless timestamped. I have discovered how to timestamp code produced in Microsoft office, in particular Access 2003.

You must modify the registry as follows:

Create the following keys:

HKEY_Current_User\Software\Microsoft\VBA\Security\TimeStampURL (string)
HKEY_Current_User\Software\Microsoft\VBA\Security\TimeStampRetryCount
HKEY_Current_User\Software\Microsoft\VBA\Security\TimeStampRetryDelay

Set the URL to:

http://timestamp.verisign.com/scripts/timstamp.dll

Note the spelling.

TimeStampRetryCount is a DWORD registry key value that is the number of retries the Visual Basic Editor will attempt to connect to the timestamping server. Try 3.

TimeStampRetryDelay is a DWORD registry key value that is the number of seconds the Visual Basic Editor will delay before retrying a connection to the timestamping server. Try 5.

After you have modified the registry, go on line, remove the signature and re-sign your code. It will have a timestamp.

Java timestamping

Certum.pl is working for timestamping java codesigning see JavaCodeSigningTest for example

Timestamping service URL http://time.certum.pl/

Certificates to add to "cacert" java config file
Certum CA : http://www.certum.pl/keys/ca.crt
Certum TSA cert : http://www.certum.pl/keys/tsa.crt

Here is a bundle with the appropriate root certs to replace cacerts in jre/lib/security cacerts md5 : 05444dcc99687383ed165bd60f7da10f

An alternative to this method is detailed at JavaTimeStamping which does not require any changes to cacerts in jre/lib/security by the user. A timestamp CA cert is added to cacerts automatically by the applet itself.

Misc

see :
http://mindprod.com/jgloss/timestamp.html

timestamp service :
http://timestamping.edelweb.fr/
http://timestamping.edelweb.fr/service/tsp <<<<
http://timestamp.comodoca.com/authenticode

CategorySoftware