Tracker »
Issue 1812 »
Issue activity log
| 2019-12-04 21:03 | Created | Release stable version with previous trusted certificate |
| Component | Setup | |
| Severity | Enhancement | |
| Comment | https://winscp.net/forum/viewtopic.php?t=28543 https://winscp.net/forum/viewtopic.php?t=28537 https://winscp.net/forum/viewtopic.php?t=28537 |
|
| 2019-12-04 21:08 | Comment | As our existing code signing certificate is expiring on 2020-01-23, we have renewed it. Though we didn't know that Microsoft Defender SmartScreen will consider the renewed certificate as a new one and will trigger a warning: "Windows Defender SmartScreen prevented an unrecognized app from starting" The warning will be displayed until the certificate builds a reputation. Criteria for that are not known. See also: https://security.stackexchange.com/q/222140/43677 Until that reputation issue is resolved, we plan to release a new version of WinSCP stable branch (5.15) with the old certificate. The new certificate will be used only for the development branch (5.16) for now. Though by installing a version that uses the new certificate you are helping us building the reputation of the new certificate. So please consider that. To dismiss the warning, click "More Info" and then "Run anyway". If you want, you can verify an integrity of the installer: https://winscp.net/eng/docs/installation#verifying |
| 2019-12-04 21:10 | Comment | https://winscp.net/tracker/530#c16 |
| 2019-12-04 21:12 | Comment | Related: https://winscp.net/forum/viewtopic.php?t=28552 |
| Summary | Release stable version with previous trusted certificate to avoid "Windows Defender SmartScreen prevented an unrecognized app from starting" | |
| 2019-12-05 11:45 | Status | RESOLVED |
| Implemented in | 5.15.9 | |
| Resolution | FIXED | |
| Comment | Released. | |
| 2022-10-05 09:03 | Comment | As our existing code signing certificate is expiring on 2020-01-23, we have renewed it.· · Though we didn't know that Microsoft Defender SmartScreen will consider the renewed certificate as a new one and will trigger a warning:· //"Windows Defender SmartScreen prevented an unrecognized app from starting" // · The warning will be displayed until the certificate builds a reputation. Criteria for that are not known. See also: https://security.stackexchange.com/q/222140/43677· · Until that reputation issue is resolved, we plan to release a new version of WinSCP stable branch (5.15.x) with the old certificate. The new certificate will be used only for the development branch (5.16.x) for now.· · Though by installing a version that uses the new certificate you are helping us building the reputation of the new certificate. So please consider that.· · To dismiss the warning, click //"More Info"// and then //"Run anyway"./ /. · If you want, you can verify an integrity of the installer:· https://winscp.net/eng/docs/installation#verifying |