[Spice-devel] Spice Guest Agent has expired RedHat signing cert

Aysan, Hakan Hakan.Aysan at ncr.com
Thu Aug 24 11:47:24 UTC 2023


Hello,


We are using the Windows Spice guest tools package https://www.spice-space.org/download/windows/spice-guest-tools/spice-guest-tools-latest.exe available on this page on your web site: Download (spice-space.org)<https://www.spice-space.org/download.html>

This package supports silent installation via the /S switch, but Windows prompts to trust the RedHat code signing cert. Clicking allow and installing the package installs this cert, and we can then export that and distribute it in advance to other computers, which then means that the /S results in a fully silent install on those other computers. However, in doing that, we noticed that the cert is actually expired, which is not ideal from a security point of view. Could you rebuild this package with a non-expired code signing cert and post on your website?

Here are details of the expired cert in the package above:

[cid:image001.png at 01D9D689.1E05A3D0]

Kind Regards,

Hakan Aysan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/spice-devel/attachments/20230824/4eeb37e1/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 90745 bytes
Desc: image001.png
URL: <https://lists.freedesktop.org/archives/spice-devel/attachments/20230824/4eeb37e1/attachment-0001.png>


More information about the Spice-devel mailing list