How to Code Sign a CEP InDesign Extension with DigiCert

Forum|Forum|1 year ago
May 23, 2024
3 replies
547 views

Hi,

We are manintaining an old CEP IND Extension for all our customers.

Until now, we used ZXPSignCmd.exe to build the ZXP and sign it using a *.p12 format cert.

Our 3 year old DigiCert code signing cert expies in 1 (!!!) day. I got a new cert from DigiCert, but a private key is no longer provided due to the new FIPS standard. Thefore, ZXPSignCmd.exe cannot be used.

How do a create the ZXP and and sign it without a private key (*.p12 format cert)? Tomorrow our customers will no longer be able to use our software!!!

TIA!

mlavie

This topic has been closed for replies.

A

Abhijeet Narvekar

Inspiring

Using windows `signtool` worked for us with digicert digilocker
verifying signature using ZXP sign command shows success.

ZXPSignCmd -verify client_xxx.zxp -certInfo
*********** Certificate Information ***********
CN: Acrolinx
OU: 
DN: /C=US/ST=NY/O=Acrolinx/CN=Acrolinx
OS Trusted: false
Revoked: false
Timestamp: Valid and within certificate validity dates at time of signing
Signing Certificate: Valid (from 2016-04-27 until 2027-07-15)
***********************************************
Signature verified successfully

Thanks,
Abhijeet

M