19 Commits

Author SHA1 Message Date
Martijn Laan
00838c94ac
Improve ISCmplr's issigverify errors to be like Setup's, with small differences.
Also fix ISSigTool compilation.
2025-06-06 07:48:23 +02:00
Martijn Laan
4b294bdf0e
Check trust of the check E32's + more TrustFunc cleanup + fix the .issig entries added by previous commit. Todo: islzma*.exe? Also todo: add directive to disable. 2025-05-29 20:51:18 +02:00
Martijn Laan
74b6ef8c9d
Check trust of the decompression DLLs + TrustFunc cleanup. Todo: check E32's and possible islzma*.exe. Also todo: add directive to disable. 2025-05-29 20:21:34 +02:00
Martijn Laan
ad8b238d0d
Add KeepOpen parameter to TrustFunc's CheckFileTrust, as of yet unused. Also add comments. 2025-05-29 17:07:57 +02:00
Martijn Laan
88dc65dddf
Fix TrustFunc not checking ISSigVerifySignature result but not also always raising an exception. Harden the other non checking ones for this. 2025-05-19 17:20:28 +02:00
Martijn Laan
faf859c14a
Cleanup duplicate ISSig verification code. 2025-05-18 19:55:05 +02:00
Martijn Laan
b521a29344
Make TRUSTALL and older Delphi versions work again. 2025-04-22 17:05:20 +02:00
Martijn Laan
8510f80baa
Cleanup. 2025-04-19 09:48:23 +02:00
Martijn Laan
8d86c33409
Remove catch all from LoadTrustedLibrary as well. This makes it show the failure reason in error messages instead of just saying 'not trusted'. 2025-04-18 16:35:18 +02:00
Martijn Laan
43aab0ecac
Remove catch all from TrustedFileExists. Didn't do anything anyway since LoadTrustedLibrary is the only caller and it also has a catch all (at the moment). 2025-04-18 15:49:14 +02:00
Martijn Laan
84ccece758
Add and use LoadTrustedLibrary function which protects the library from changes between the trust check and the load. Also fixes a typo and improves ISCmplr/isscint error messages on trust fail. 2025-04-18 09:22:15 +02:00
Martijn Laan
aebff69e89
Fix another typo. 2025-04-18 07:38:07 +02:00
Martijn Laan
203ffa67a5
Make TrustFunc more generic since it's in Components. Can't be moved to Projects\Src instead because Components\ScintInt needs it. 2025-04-17 13:11:29 +02:00
Martijn Laan
c2ccdf4987
Move key texts into a separate file. The idea is that you could use assume-unchanged or skip-worktree on the file. Keeping it out of Git is not an option since that would complicate building from the IDE using a fresh checkout which is undesirable. 2025-04-17 12:58:22 +02:00
Martijn Laan
006bb260bf
Replace default keys with recognizable ones. ("def01"/"def02") 2025-04-17 08:53:02 +02:00
Martijn Laan
e63a37cb86
Use two keys so the prebuilt binaries don't have to be resigned. Note that a full build doesn't work yet at the moment for ISCmplr.dll and ISPP.dll: it calls ISSigTool before signtool is called, making the .issig invalid. Need to figure out a clean way to fix this. 2025-04-17 08:30:00 +02:00
Martijn Laan
ec81524172
Use ISSigFunc to check trust. Works while debugging from Delphi as well. Defining TRUSTALL would only be needed while debugging isscint.dll from VS for example.
AllowedPublicKeyText is formatted as a Delphi 12 multiline string literal since I plan to make ISSigTool embed it automatically from issig.bat to avoid complicating the build for others.
2025-04-16 21:13:14 +02:00
Martijn Laan
78243ee56f
Use TrustedFile before loading compression DLLs + some cleanup. 2025-04-05 12:30:26 +02:00
Martijn Laan
4fd6284b27
Add TrustedFile function. Debug: always returns True, Release: checks for a signature. 2025-03-12 22:32:20 +01:00