Changes between Version 5 and Version 6 of TapWindows6CodesignTests


Ignore:
Timestamp:
04/19/16 13:51:29 (8 years ago)
Author:
Samuli Seppänen
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • TapWindows6CodesignTests

    v5 v6  
    55Note that the driver will not work on Windows XP or Windows Server 2003, because the operating systems do not support the NDIS6 interface required by tap-windows6.
    66
    7 = Download links =
     7= Drivers =
    88
    99== tap6-ev-signed ==
    1010
    11 These following two files files contain a tap-windows6 driver (tap6-ev-signed) that has been signed using an EV SHA2 code-signing certificate:
     11This driver package has one Authenticode signature done with an Digicert EV SHA2 certificate, and ''!DigiCert High Assurance EV Root CA'' (from [https://msdn.microsoft.com/en-us/library/windows/hardware/dn170454%28v=vs.85%29.aspx here]) was used as the cross-certificate. These following two files files contain a tap-windows6 driver (tap6-ev-signed) that has been signed using an EV SHA2 code-signing certificate:
    1212
    1313 * [http://build.openvpn.net/downloads/temp/tap6-ev-signed.zip tap6-ev-signed.zip]
    … …  
    1515
    1616Note that the ''tap0901.sys'' file is ''not'' signed in this driver package - only ''tap0901.cat'' is.
     17
     18== tap6-dual-sha1-sha2ev ==
     19
     20This driver contains two signatures:
     21
     22 * Primary: non-EV SHA1 signature + Digicert SHA1 timestamp + !DigiCert Assured ID Root CA (cross-certificate)
     23 * Secondary: EV SHA2 signature + Digicert SHA2 timestamp + !DigiCert High Assurance EV Root CA (cross-certificate)
     24
     25Note that the ''tap0901.sys'' file ''is'' signed in this driver package. In practice that does not seem to have any benefits.
     26
     27Download links here:
     28
     29 * [http://build.openvpn.net/downloads/temp/tap6-dual-sha1-sha2ev.zip tap6-dual-sha1-sha2ev.zip]
     30 * [http://build.openvpn.net/downloads/temp/tap6-dual-sha1-sha2ev.tar.gz tap6-dual-sha1-sha2ev.tar.gz]
    1731
    1832= Testing the drivers =
    … …  
    7993== tap-ev-signed ==
    8094
    81 This driver package has one Authenticode signature done with an Digicert EV SHA2 certificate, and ''!DigiCert High Assurance EV Root CA'' (from [https://msdn.microsoft.com/en-us/library/windows/hardware/dn170454%28v=vs.85%29.aspx here]) was used as the cross-certificate.
    82 
    8395||'''Operating system'''||'''Bitness'''||'''Installs?'''||'''Works?'''||'''All updates installed?'''||'''Errors'''||'''Tester'''||
    8496||Windows Vista||32||Yes||Yes||No||Publisher not detected at install||selva||
    … …  
    93105
    94106 1. Cannot enable the tap adapter. Error message: "The TAP-Windows Adapter V9 service failed to start due to the following error: Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source."
     107
     108== tap6-dual-sha1-sha2ev ==
     109
     110||'''Operating system'''||'''Bitness'''||'''Installs?'''||'''Works?'''||'''All updates installed?'''||'''Errors'''||'''Tester'''||
     111||Windows 7 (pro)||64||Yes||Yes||Yes||-||mattock||