>>Happy New Year! And does anybody have experience confirming that
>>a) The running VFP exe's digital signature is valid, and
>>b) That it is signed by us, or a named signatory.
>I have no answer about signatures, but I wonder if you could achieve something similar using hashes/digests of EXE, DLL or other files.
Will give it a try, thanks. VFPC++ compiler already checks to make sure the app dll version matches the exe, so perhaps it's possible also to do a checksum- though it's not possible to save the resulting checksum into the app without altering it(!) I'm thinking that the digital signature is there for this exact purpose, so it's a shame it's made so difficult to check it...
"... They ne'er cared for us
yet: suffer us to famish, and their store-houses
crammed with grain; make edicts for usury, to
support usurers; repeal daily any wholesome act
established against the rich, and provide more
piercing statutes daily, to chain up and restrain
the poor. If the wars eat us not up, they will; and
there's all the love they bear us."
-- Shakespeare: Coriolanus, Act 1, scene 1
