Re: download versie 2.12

[Trevor Daniels]

Jan Nieuwenhuizen wrote Tuesday, March 31, 2009 7:34 PM


> Op dinsdag 31-03-2009 om 19:37 uur [tijdzone +0300], schreef Simon
> Dahlbacka:
>
> > The unknown publisher warning sounds like OP is running Vista. 
> > The
> > warning is due to the fact that the installer isn't authenticode
> > signed. Getting a suitable certificate for this is several 
> > hundred €/$
> > per year, and thus is not likely to happen.
>
> Does Microsoft Vista advice against installing anything
> that Microsoft did not make money off?

No, when the mingw.exe is executed Vista pops up a panel which
says the publisher can't be identified and gives the user the option
to cancel or continue.  The advice is to continue only if you have
installed the program before or know where it is from.  This is 
sensible
enough - it provides a warning that to proceed will install a 
program
(the user may not have intended to do this, so the warning helps to
prevent the unintentional installation of malware).

> That can't be true.  Users
> won't accept that.

It's hardly a big deal to click OK once.  An unidentified program is
one that doesn't have a valid digital signature from its publisher.
The warning may well scare off less knowledgeable people and
prevent their installing LilyPond, so it would be an improvement
if LilyPond could be digitally signed in a way recognised
by MS.

> Do you have a reference?

This check is part of MS's User Account Control.  The check on 
installing
applications is one of about a dozen checks performed by UAC.
See "An unidentified program wants access to your computer" in the
description of UAC at
http://windowshelp.microsoft.com/Windows/en-US/help/0eeb9ddd-ddaa-4cc5-a0929908305665471033.mspx

You need a X.509 version 3 code-signing certificate to sign an 
application. See
http://technet.microsoft.com/en-us/library/cc962053.aspx

For a full description of the process see
http://msdn.microsoft.com/en-us/library/bb172338.aspx

> Jan

Trevor