|
Hello,
Posting this right here as I belive that this is a generic issue.
Right now if you do app development in most cases you are also code signing the app, using your favorite tool and a private key.
Since February, due to Microsoft adopting a new set of standards, issuers are obliged to deliver the digital certificates on hardware mediums aka USB tokens
Minimum Requirements for Code Signing
While this works great for physical servers, on cloud environments supporting a USB interface is not as practical, for example Amazon does not support it, thus making the below use case unfeasible.
Server receives a request for a particular client app, based on the request param's server changes the app's resources then code signs it, replying with the final result.
Any opinions on this are welcomed.
|
|
|
|
|
Jb3void wrote: Right now if you do app development in most cases you are also code signing the app
Not me. I figure if they have access to the server such that they can replace components then everything is already compromised. Not to mention that if they can do so in a useful manner then I would suspect an inside job as well (which the vast majority of breaches are anyways.)
Jb3void wrote: Server receives a request for a particular client app, based on the request param's server changes the app's resources then code signs it, replying with the final result.
Not sure I understand what that scenario is suggesting.
Code signing involves using a certificate when the code is built (part of the CM build process) to provide security when the application runs. It allows the application to verify resources that it loads, such as a library.
That is a limited scope solution. All that is required is that a local machine (not cloud) is using for the final step of the process before delivery.
Your statement above suggests you are doing something in the normal client message handling scheme. That would be outside the scope of what I laid out.
Now I can see that if you are using a cloud server to do your builds then that would appear to be a problem for normal code signing. But your description would not seem to jive with that.
|
|
|
|
|
You'll need some form of middleware (such as ActiveIdentity) that will provide certificates from an external token and make them accessible to network connections.
I'm afraid that I don't have experience with your particular use case, but I'm sure that if you follow up with the issuer or with AWS you will be able to get a product recommendation.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
I registered an account here in codeproject in a hope that i can upload file, like an xml file below:
http://www.codeproject.com/script/Membership/Uploads/1740717/update.xml
How can i have a file, such as .xml file uploaded to codeproject so that i can use it's 'hotlink' like above... i am a newbie
|
|
|
|
|
What happened when you tried to upload it?
|
|
|
|
|
Thank you Richard. My main problem is how to upload here in codeproject. I just want to make my own .xml file uploaded just like the link I previously posted. Im a newbie pls bear with me
|
|
|
|
|
Your main problem is that you have still not explained what you have tried, and what did not work.
|
|
|
|
|
I am rephrasing my problem...
I have an .xml file that i want to [save remotely, store remotely, host remotely... i don't know the real word for it]. I just want to imitate this one [the link itself, and not the content]:
"http://www.codeproject.com/script/Membership/Uploads/1740717/update.xml"
Say i have a file myfile.xml and want to get a "link" that literally look like:
"http://www.codeproject.com/script/Membership/Uploads/1234567/myfile.xml"
where here in codeproject i can do that?
|
|
|
|
|
Use the menu drop down at your username, near the top right of the frame, and select "My Uploads".
|
|
|
|
|
Ummm. Correct me if I'm wrong, but I thought one needs pretty heavy privileges to be allowed uploads. You and I have, but OP hasn't, as far as I can tell from looking at profile/privileges.
Cheers,
Peter
Software rusts. Simon Stephenson, ca 1994. So does this signature. me, 2012
|
|
|
|
|
You are probably correct. But quite frankly this is not a particularly difficult issue to resolve for anyone with a little gumption.
|
|
|
|
|
You'll need a webhost for that, which codeproject isn't.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
i am following a tutorial but i am stucked!
HOW to save a file so that i can get its link like below. i have a file "update.xml" that i want to compare between the local drive and the remote drive or server or whatever. how can i save such file remotely and use its url like the format below?
https://remote.update.net/myapp/update.xml
|
|
|
|
|
|
I need help to define server spec for .net app with considerations noted below:
- 250 to 300 users with 50+ concurrent usage
- Its a knowledge portal with discussions/forums/blogs and search features
I am planning the below spec and any help to review will be helpful
1 App server and 1 DB server
APP Server
Windows 2008 R2
IIS
16 GB RAM
500 GB HDD
4 core processor
DB APP
Windows 2008 R2
SQL Server 2008 R2
16 GB RAM
1 TB HDD
4 Core processor
Thanks
|
|
|
|
|
Hi:
Do you have data about network usage ratio of your ISP channel (Kbps / Mbps / Gbps ) ? 
How many tables has your database (db) initially ?
What is the max length of your fields and how many fields are the largest table that belongs to your db ?
Jesus (Ieshua) Carroll
|
|
|
|
|
just follow this link https://en.wikipedia.org/wiki/GitHub
they are saying " It offers all of the distributed version control and source code management "
what they try to mean distributed version control ?
if we upload a project to github then many people around the world can work on the same project.......that is why GitHub is called distributed version control ?
if yes then online TFS is also provide same functionality. if we upload a project to TFS then many people around the world can work on the same project but TFS never claim that it is distributed version control.
so please some one who understand distributed version control then please explian why GitHub is consider distributed version control.
thanks
tbhattacharjee
|
|
|
|
|
How about doing your own research for a change? 
Git - Wikipedia[^]
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
I want to change hosting this website http://www.thequotes.net/ to cloud, How do I do that?
|
|
|
|
|
Which cloud are you doing to use? The answer would be vendor specific.
A WordPress website can be downloaded easily, Export — Support — WordPress.com, that would be enough. And then on the cloud vendor install WordPress and upload this website content there and you will be ready to use the web app on cloud. Almost every cloud has the WordPress add-on.
I used Azure, and Azure had a complete WordPress application setup to be used.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
<pre
hi am="" having="" issue="" when="" starting="" my="" nodemanager="" it="" just="" disappear
am="" in="" window="" 10="" weblogic="" 12c
=""
it="" show="" this="" massage="" and="" disaapear
nodemgr_home="" is="" already="" set="" to="" c:\oracle\middle~1\oracle~1\user_p~1\domains\fr_dom~1\nodema~1
classpath=".;C:\Java\JDK18~1.0_1\lib\tools.jar;C:\oracle\MIDDLE~1\ORACLE~1\wlserver\server\lib\weblogic.jar;C:\oracle\MIDDLE~1\ORACLE~1\oracle_common\modules\net.sf.antcontrib_1.1.0.0_1-0b3\lib\ant-contrib.jar;C:\oracle\MIDDLE~1\ORACLE~1\wlserver\modules\features\oracle.wls.common.nodemanager.jar;;C:\oracle\Middleware\Oracle_Home\oracle_common\modules\oracle.jps\jps-manifest.jar
"
=""
c:\oracle\middle~1\oracle~1\user_p~1\domains\fr_dom~1\nodema~1="">"C:\Java\JDK18~1.0_1\bin\java.exe" -server -Xms32m -Xmx200m -Dcoherence.home=C:\oracle\MIDDLE~1\ORACLE~1\coherence -Dbea.home=C:\oracle\MIDDLE~1\ORACLE~1 -Dohs.product.home=C:\oracle\Middleware\Oracle_Home\ohs -Dreports.tools.product.home=C:\oracle\Middleware\Oracle_Home\ReportsToolsComponent -Dreports.product.home=C:\oracle\Middleware\Oracle_Home\reports -Dreports.bridge.product.home=C:\oracle\Middleware\Oracle_Home\ReportsBridgeComponent -Dreports.server.product.home=C:\oracle\Middleware\Oracle_Home\ReportsServerComponent -Dforms.product.home=C:\oracle\Middleware\Oracle_Home\forms -Doracle.security.jps.config=C:\oracle\Middleware\Oracle_Home\user_projects\domains\Fr_domain\config\fmwconfig\jps-config-jse.xml -Dcommon.components.home=C:\oracle\Middleware\Oracle_Home\oracle_common -Dopss.version=12.2.1.2 -Dweblogic.RootDirectory=C:\oracle\MIDDLE~1\ORACLE~1\USER_P~1\domains\FR_DOM~1 -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader "-Djava.security.policy=C:\oracle\MIDDLE~1\ORACLE~1\wlserver\server\lib\weblogic.policy" "-Dweblogic.nodemanager.JavaHome=C:\Java\JDK18~1.0_1" weblogic.NodeManager -v
|
|
|
|
|
Good day friends!
I have searched the www for this question but what I saw is not what am looking for. I have asp.net website ready for hosting. But before I will published it, I want to test some of the functionalities on my own with various devices e.g mobile to see the performance and speed. How I intend to do the testing is through creation of my own web server using window 7 and IIS. Please help
|
|
|
|
|
With what?
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
|
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
