5 replies to this topic

[Icecube]

This might be interesting for WinVBlock, Firadisk, Imdisk and other drivers:

Driver Code Signing

A while back it was announced that the ReactOS Foundation had acquired a VeriSign code signing certificate, which allows us to sign drivers to run on 64bit Windows systems without having to jump through hoops and disabling a good deal of media components. The Foundation also announced that it was willing to sign drivers for other open source projects that may not be able to acquire a certificate. The conditions for signing have now been better formalized and are listed on this page. The main point is that the Foundation will not sign something that risks getting its certificate revoked, so nothing designed to circumvent OS security features or DRM will be signed by us. We will also generally ask that any issues highlighted by the driver verification tools be dealt with or at the very least explained. Otherwise, all that we require is that a project be under a free or open source license that a link back to the ReactOS Project be added to the site of the driver we sign.

http://www.reactos.org/en/newsletter_80.html

The ReactOS Foundation has a VeriSign code signing certificate that can be used to sign 64bit drivers for Windows. The Foundation is prepared to assist other open source projects that wish to distribute 64bit drivers but are not able to acquire a code signing certificate by signing their drivers. However, this offer is contingent on fulfilling the following conditions.

• The Foundation will only sign open source drivers.
• The Foundation will build the driver binary to sign. We will not accept a binary blob. This means all source code and tools needed to build the driver must be accessible by the Foundation.
• The driver may not be used to circumvent security features in the OS. This includes trying to break DRM features such as secure processes.
• The driver may not be used to engage in otherwise illegal activities beyond trying to circumvent security features in the OS.
• A link back to the ReactOS homepage somewhere on the project/product's page. Preferably someplace that is easily sighted.

The Foundation reserves the right to decline signing a driver even if the above conditions are met. All inquiries may be directed to Ziliang Guo (ziliang.guo at reactos.org).

Projects signed by the ReactOS Foundation:

* DiskCryptor
* Process Hacker

http://www.reactos.org/wiki/Driver_Signing

Edit: for some reason the second part of the post didn't appear.

[Brito]

These are really cools news.

I leave a link to the direct page at the ReactOS site: http://www.reactos.o.../Driver_Signing

Thank you for sharing this tip Icecube.

[Sha0]

This might be interesting for WinVBlock, Firadisk, Imdisk and other drivers...

Thanks!

[pscEx]

Great news!

Peter

[sambul61]

I wonder why only 2 projects are listed as signed by them. Possibly, they just started this project.

[El_Hoy]

there are 3 now. USB/IP as joined.