Re: VbScript signing

See Security and Windows Script Host in the Platform SDK...

Basic example:

Before signing:


Dim User
Dim UserName
Dim ServerName
UserName = InputBox("Enter the name of the user:")
ServerName = InputBox("Enter the name of the server:")
Set User = GetObject("WinNT://" & Servername & "/" & UserName & ",user")
MsgBox "The last time " & UserName & " logged on was: " & vbCRLf &
vbCRLf & User.LastLogin


After running sign.vbs: (note: copy and paste everything between the
<copy> and <paste> tags into notepad. Save the file as test.vbs, then
right click test.vbs and view properties to see the digital
signature)...

<copy>

Dim User
Dim UserName
Dim ServerName
UserName = InputBox("Enter the name of the user:")
ServerName = InputBox("Enter the name of the server:")
Set User = GetObject("WinNT://" & Servername & "/" & UserName & ",user")
MsgBox "The last time " & UserName & " logged on was: " & vbCRLf &
vbCRLf & User.LastLogin


'' SIG '' Begin signature block
'' SIG '' MIIF7QYJKoZIhvcNAQcCoIIF3jCCBdoCAQExDjAMBggq
'' SIG '' hkiG9w0CBQUAMGYGCisGAQQBgjcCAQSgWDBWMDIGCisG
'' SIG '' AQQBgjcCAR4wJAIBAQQQTvApFpkntU2P5azhDxfrqwIB
'' SIG '' AAIBAAIBAAIBAAIBADAgMAwGCCqGSIb3DQIFBQAEECRn
'' SIG '' w4gZUiBz+qMPqida5KWgggNzMIIDbzCCAtigAwIBAgID
'' SIG '' COMVMA0GCSqGSIb3DQEBBAUAMIHEMQswCQYDVQQGEwJa
'' SIG '' QTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIwEAYDVQQH
'' SIG '' EwlDYXBlIFRvd24xHTAbBgNVBAoTFFRoYXd0ZSBDb25z
'' SIG '' dWx0aW5nIGNjMSgwJgYDVQQLEx9DZXJ0aWZpY2F0aW9u
'' SIG '' IFNlcnZpY2VzIERpdmlzaW9uMRkwFwYDVQQDExBUaGF3
'' SIG '' dGUgU2VydmVyIENBMSYwJAYJKoZIhvcNAQkBFhdzZXJ2
'' SIG '' ZXItY2VydHNAdGhhd3RlLmNvbTAeFw0wMjAzMDExNjQ1
'' SIG '' MTNaFw0wMzAzMDExNjQ1MTNaMIGyMQswCQYDVQQGEwJV
'' SIG '' SzEUMBIGA1UECBMLV2VzdCBTdXNzZXgxEDAOBgNVBAcT
'' SIG '' B0NyYXdsZXkxKDAmBgNVBAoTH0tvbWZvcnQgT2ZmaWNl
'' SIG '' IEVudmlyb25tZW50cyBwbGMxJzAlBgNVBAsTHlNlY3Vy
'' SIG '' ZSBBcHBsaWNhdGlvbiBEZXZlbG9wbWVudDEoMCYGA1UE
'' SIG '' AxMfS29tZm9ydCBPZmZpY2UgRW52aXJvbm1lbnRzIHBs
'' SIG '' YzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAu6EN
'' SIG '' Av8J5hmvAuoqRdRit+SRGZSj0wHWyK1dfvZ19xIjRbRa
'' SIG '' KS8HckXBS4KrqfnV8vz7jf4zoizzK9XcdZ5beIeTj4qp
'' SIG '' Oqe6SvPZdaBfCX3A6Rjx7unn4TbkSZ97Ra1RI0bbzyxY
'' SIG '' R85jnV53rapZOTabKvLt/iXARIvmiZ1RNZECAwEAAaN/
'' SIG '' MH0wHwYDVR0lBBgwFgYIKwYBBQUHAwMGCisGAQQBgjcC
'' SIG '' ARYwEQYJYIZIAYb4QgEBBAQDAgQQMB0GA1UdBAQWMBQw
'' SIG '' DjAMBgorBgEEAYI3AgEWAwIHgDAaBgNVHREEEzARgg93
'' SIG '' d3cua29tZm9ydC5jb20wDAYDVR0TAQH/BAIwADANBgkq
'' SIG '' hkiG9w0BAQQFAAOBgQB2FH/+IUmh64vgTWFGiW5yPTsU
'' SIG '' FAd0lGp1wDaGYkZqxiHHVFE50bIduHkROvs1Em3q4UXv
'' SIG '' un2mZ8Z4b/XK3tkSg6GLojvkOQDZBSlUyPwY2Hdm9JBg
'' SIG '' Gqeh32WeX902SyAPtbjb1cwnDv2eYG8Wn2MlOI4VjmmI
'' SIG '' hbM5+2MA2rqS+DGCAeQwggHgAgEBMIHMMIHEMQswCQYD
'' SIG '' VQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIw
'' SIG '' EAYDVQQHEwlDYXBlIFRvd24xHTAbBgNVBAoTFFRoYXd0
'' SIG '' ZSBDb25zdWx0aW5nIGNjMSgwJgYDVQQLEx9DZXJ0aWZp
'' SIG '' Y2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMRkwFwYDVQQD
'' SIG '' ExBUaGF3dGUgU2VydmVyIENBMSYwJAYJKoZIhvcNAQkB
'' SIG '' FhdzZXJ2ZXItY2VydHNAdGhhd3RlLmNvbQIDCOMVMAwG
'' SIG '' CCqGSIb3DQIFBQCgbDAQBgorBgEEAYI3AgEMMQIwADAZ
'' SIG '' BgkqhkiG9w0BCQMxDAYKKwYBBAGCNwIBBDAcBgorBgEE
'' SIG '' AYI3AgELMQ4wDAYKKwYBBAGCNwIBFjAfBgkqhkiG9w0B
'' SIG '' CQQxEgQQGw1TUIa1+RwErwc24rjNQzANBgkqhkiG9w0B
'' SIG '' AQEFAASBgHWDA+3H7KQr7ZSIW9+UxEVOdjspZQdP7wjS
'' SIG '' w+Re68tFXqjR8JRmOunO/y25D4phAs76pb1HZnz91WkI
'' SIG '' 0g35lWrFZn7Avs9kJJSQFK4Q+mACfdCV+aoe+x3szOO6
'' SIG '' MkLjWb1w0aNCruNe4+9B6+GWDwUM5xkNRpSd8/7dzJ/b
'' SIG '' m5Ub
'' SIG '' End signature block

<paste>


Sign.VBS:

   Dim Signer, File, Cert, Store
   Set Signer = CreateObject("Scripting.Signer")
   File  = <file to sign>
   Cert  = <certificate to use>
   Signer.SignFile File, Cert


Regards,

Gavin Faux
Systems Developer
Komfort Office Environments plc


-----Original Message-----
From: Balazs Benei [mailto:[email protected]] 
Sent: 15 April 2002 16:01
To: [email protected]
Subject: [VBCOM] VbScript signing

Hello everybody,

I'm working on an internet/intranet application, and I have the
following
problem:
I have a .vbs file, which contains some code that manipulates Excel on
the
clients machine. In order to operate, the script requires quite loose
security settings in IE, so the user should change these settings - but
it
is not a good solution for me. So my question is: can I have a VbScript
file signed by VeriSign (or any other company)? I tried to gather some
information about this topic, and I found that only .cab, .dll, .exe,
and .ocx files can be signed (among those that can be downloaded from
internet.)
But I also found that in Netscape .js files can have a sign. But what
about .vbs files?

Thanks in advance
    Balazs

You can read messages from the VBCOM archive, unsubscribe from VBCOM, or
subscribe to other DevelopMentor lists at http://discuss.develop.com.

You can read messages from the VBCOM archive, unsubscribe from VBCOM, or
subscribe to other DevelopMentor lists at http://discuss.develop.com.