Fooling Around // Software Production Line

Update:

• Added: Infotips for files enabled by default
• Added: Shell icon overlay handler displays green check/red exclamation when digital signature exists and is valid/invalid

Note that shell icon overlays are not enabled by default because it may be an impact on shell performance. To enable, add a registry value that defines path patterns to be subject for digital signature verification.

Key: HKEY_CLASSES_ROOT\CLSID\{D95FC94B-D292-4566-BEB2-4EB74F2FB561}
Value Name: “Path Expressions”
Value: Comma-separated list of regular expression patterns, eg. “\.((exe)|(dll)|(cab))$” enables the feature for all .exe, .dll and .cab files.

Download the extension (432K, MS CAPICOM redistributable included)

Another handy shell extension for those who deal with digital signatures. The extension adds new columns to shell explorer and also allows to put digital signature related information into informational tooltips.

The following columns are added:

• Signature state (presence, validity), description, URL
• Signer certificate details (subject, issuer, email etc.)
• TimeStamper certificate details (signing time, subject, issuer, email etc.)

Some screenshots are shown below:

To add digital signature information info informational tip, use regedit to update the following items:

Key: HKEY_CLASSES_ROOT\dllfile, backup “InfoTip” value and append the following string:
“;{C0399172-9505-441F-835B-C78EF8253BE9}1;{C0399172-9505-441F-835B-C78EF8253BE9}3;{C0399172-9505-441F-835B-C78EF8253BE9}15″

This will add digital signature state, description and signing time to the tip. The same modification may be applied to HKEY_CLASSES_ROOT\exefile and other keys.

Download the extension (566K, MS CAPICOM redistributable included)

Keywords: CAPICOM, Shell Extensions, Digital Signatures, Authenticode