Re: Query : Necessity of Signing LibUsb driver

Hi Rinkesh,

On Thu, 2019-09-19 at 18:54 +0000, Rinkesh Patel via Libusb-win32-
devel 
wrote:
> I figured out that we need to SignIn LibUsb driver to install and use
> it on windows10.
> My question is, can I use Libraries of LibUSB directly in my Project
> and bind them statically compile time.
> 1)      Will this approach work on all Windows OSs I mentioned above?
> Or
> 2)      Do I still need to sign in LibUSB driver for Windows-10.
> 3)      Do I also need to sign-in for Other than Windows10 OSes as
> well?

1) Yes, you can link the library part of libusb-win32 statically to
your project, if your project is open source. If not, you need to link
to it dynamically. I am not a legal expert, but i am fairly sure that
is the limitation of LGPL v2. Consult your legal team for advice on
this.

2) Yes, always if you use the driver libusb0.sys. You can also use
WinUsb or LibUsbK.

3) That depends if you want to use it with other OSes. Windows 10 can
be attestation signed, and previous versions cannot. For win7 and win8
you need to pass the test suite from MS and upload the results to their
portal. If you pass all the tests for win7,win8 & win10 you can sign
the driver once and for all.

Additionally, to sign for Win10 you need an EV cert, as a normal cert
will not do.

Thanks,

/pedro