[Spice-devel] QXL from spice-guest-tools-0.3, Code 52 - signing problem?

[Richard Chan]

I'm surprised (and jealous) you folks didn't have QXL driver signing
problems on Windows 7 64-bit Pro :-)

I found a  RedHat release virtio-win-1.5.3: this updates all the
virtio drivers including virtio serial (BSOD) and QXL (code 52
driver signing). This is a great release as it has fixed all my problems
(and I did observe the BSOD too).
- but there seems to be a relatively  poor synchronisation  of drivers
between RedHat, Fedora, and the Spice guest tools :-(

https://rhn.redhat.com/errata/RHBA-2012-1083.html


Cheers
Richard


On Fri, Jan 25, 2013 at 10:50 PM, Xiaofan Chen <xiaofanc at gmail.com> wrote:

> On Fri, Jan 25, 2013 at 10:10 PM, Christophe Fergeau
> <cfergeau at redhat.com> wrote:
> > I expect the virtio drivers and the qxl driver to install with a warning
> > on win7 32 bit, and to be rejected on win7 64 bit (because they are non
> > WHQL'ed) unless you disable driver signing verification somehow.
>
> No you should not need WHQL for Windows 7 64bit. You need a
> valid signing certificate but not WHQL. WHQL driver package
> will have no warnings. Non-WHQL but signed driver packages
> will generate a warning about publisher but will not get
> rejected.
>
> > However, you're not the first one mentioning signature issues on the
> > QXL driver. Something may be wrong there, but I'm not sure how to check
> > driver signatures by myself :-/
>
> The QXL driver appears to have a valid digital signing certificates
> and valid timestamp but I have not verfied it myself (not using spice
> myself). You can use WDK's signtool to verify the certificate.
>
> Ref: https://github.com/pbatard/libwdi/wiki/Signed-Driver-Walkthrough
>
> --
> Xiaofan
> _______________________________________________
> Spice-devel mailing list
> Spice-devel at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/spice-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/spice-devel/attachments/20130127/dcc80ccd/attachment.html>