Shipping software questions

Hello,

what is the best way to correctly sign .exe files with certificates that Windows doesn’t show warning messages when opening a compiled .exe file? Same question for macOS too.

Also, I would like to know which free installation builder you use for shipping your Windows binaries.

Are there any free reliable tools for binary encryption and compression? Which ones do you use?

So many questions…

Thanks in advance

Alex

For Windows you will need an Extended Validation Code Signing Certificate - this gives instant reputation within SmartScreen. Standard validation does not give this reputation.

For macOS you will need to sign and notarise the app, the first step is being in the Apple Developer Program. I’d recommend AppWrapper by Ohanaware to help you with this.

1 Like

AppWrapper will save you a lot of time and grey hairs.

1 Like

For Windows, you can get a signing certificate from ksoftware.net.

They have a nifty utility called ksign which does on Windows what App Wrapper does on Mac.

On Mac, you need to get a developer account from developer.app.com so you get the certificate, and get App Wrapper from ohanaware.com to sign your apps.

1 Like

The usual recommendation for a Windows installer is Inno Setup.
Its free, but I love it, and have donated to the author.
It can use the ksign stuff to sign your installer as part of the build.

If a Windows application (created with Xojo) is distributed through Microsoft Store, are there any special requirements? Or just to pack the exe and these two folders with Inno Setup? What about a “codesigning” and “receipt validation” ? - as we are doing it with Mac versions.

No need to code sign for Microsoft Store. It will be done by Microsoft as part of the verification process.

I am not aware of any receipt validation, equivalent to the MAS.

2 Likes

That’s great! I like Inno Setup. Great tool.