search

chocolatey-archive / chocolatey

[DEPRECATED - https://github.com/chocolatey/choco] Chocolatey NuGet - Like apt-get, but for windows.
https://chocolatey.org
Apache License 2.0
2.81k stars 344 forks source link

Sign install.ps1 script #548

Open dermeister0 opened 10 years ago

dermeister0 commented 10 years ago

Do you need money for Authenticode certificate to sign the script? I think it'll be much better to execute it without changing execution policy.

ferventcoder commented 10 years ago

That is actually not a bad idea, but I think folks would still have issues if they were set to restricted.

gep13 commented 10 years ago

I think @mwrock did some signing of the Boxstarter Scripts. Perhaps he can point in right direction.

mwrock commented 10 years ago

I had to sign the click-once application which is the kinda different. Its the "delivery mechanism" of the powershell and it just creates a powershell session, bypassing the execution policy and runs the powershell unsigned.

I do believe that signing powershell does involve an authenticode cert which will cost money.

gep13 commented 10 years ago

Ah, that was it! I knew there was something :-)

ferventcoder commented 9 years ago

This could potentially move over to choco.