ClickOnce security

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • =?Utf-8?B?Tmlrb2xheSBQb2Rrb2x6aW4=?=

    #1

    ClickOnce security

    Good noon, community! Would you be so kind and help me solve my problem. I
    need Deploy application through ClickOnce technology. I've configuration file
    where I assign sensitive data about connection to the database. A VS
    deploying solution all files have signing by certificate. When I'm installing
    application i need immediately change this data (e.g. Server name or
    password) How can i do this correctly?

    Thanks in advance!
  • Nicholas Paldino [.NET/C# MVP]

    #2
    Re: ClickOnce security

    Nikolay,

    I don't think you can change this through ClickOnce, I think ClickOnce
    will just get your files to the machine, and make sure they are
    up-to-date/in synch with what is on the server. If you want to make changes
    to the file, your program will have to do it (and that might be an issue if
    you put your files in the program files directory, since only administrators
    (should) have access to that).

    If anything, you might want to look at storing this information in a
    user-specific directory and then accessing that from your program.

    --
    - Nicholas Paldino [.NET/C# MVP]
    - mvp@spam.guard. caspershouse.co m

    "Nikolay Podkolzin" <NikolayPodkolz in@discussions. microsoft.comwr ote in
    message news:97A36A03-5FF4-497C-A2F1-09CB31CDF2D6@mi crosoft.com...
    Good noon, community! Would you be so kind and help me solve my problem. I
    need Deploy application through ClickOnce technology. I've configuration
    file
    where I assign sensitive data about connection to the database. A VS
    deploying solution all files have signing by certificate. When I'm
    installing
    application i need immediately change this data (e.g. Server name or
    password) How can i do this correctly?
    >
    Thanks in advance!

    Comment

    • =?Utf-8?B?Tmlrb2xheSBQb2Rrb2x6aW4=?=

      #3
      Re: ClickOnce security

      If I modify a .manifest or .application file I will have to Sign it
      again with the proper security key.
      How can i do that? Which tool can help me?

      "Nicholas Paldino [.NET/C# MVP]" wrote:
      Nikolay,
      >
      I don't think you can change this through ClickOnce, I think ClickOnce
      will just get your files to the machine, and make sure they are
      up-to-date/in synch with what is on the server. If you want to make changes
      to the file, your program will have to do it (and that might be an issue if
      you put your files in the program files directory, since only administrators
      (should) have access to that).
      >
      If anything, you might want to look at storing this information in a
      user-specific directory and then accessing that from your program.
      >
      --
      - Nicholas Paldino [.NET/C# MVP]
      - mvp@spam.guard. caspershouse.co m
      >
      "Nikolay Podkolzin" <NikolayPodkolz in@discussions. microsoft.comwr ote in
      message news:97A36A03-5FF4-497C-A2F1-09CB31CDF2D6@mi crosoft.com...
      Good noon, community! Would you be so kind and help me solve my problem. I
      need Deploy application through ClickOnce technology. I've configuration
      file
      where I assign sensitive data about connection to the database. A VS
      deploying solution all files have signing by certificate. When I'm
      installing
      application i need immediately change this data (e.g. Server name or
      password) How can i do this correctly?

      Thanks in advance!
      >
      >
      >

      Comment

      • RobinS

        #4
        Re: ClickOnce security

        You can use MageUI to re-sign a manifest. On my computer, this is in
        C:\Program FIles\Microsoft VIsual Studio 8\SDK\v2.0\Bin\ .

        RobinS.
        goldmail.com
        -------------------------------------
        "Nikolay Podkolzin" <NikolayPodkolz in@discussions. microsoft.comwr ote in
        message news:FE17ABD6-3385-4316-B896-878FAB56CF46@mi crosoft.com...
        If I modify a .manifest or .application file I will have to Sign it
        again with the proper security key.
        How can i do that? Which tool can help me?
        >
        "Nicholas Paldino [.NET/C# MVP]" wrote:
        >
        >Nikolay,
        >>
        > I don't think you can change this through ClickOnce, I think
        >ClickOnce
        >will just get your files to the machine, and make sure they are
        >up-to-date/in synch with what is on the server. If you want to make
        >changes
        >to the file, your program will have to do it (and that might be an issue
        >if
        >you put your files in the program files directory, since only
        >administrato rs
        >(should) have access to that).
        >>
        > If anything, you might want to look at storing this information in a
        >user-specific directory and then accessing that from your program.
        >>
        >--
        > - Nicholas Paldino [.NET/C# MVP]
        > - mvp@spam.guard. caspershouse.co m
        >>
        >"Nikolay Podkolzin" <NikolayPodkolz in@discussions. microsoft.comwr ote in
        >message news:97A36A03-5FF4-497C-A2F1-09CB31CDF2D6@mi crosoft.com...
        Good noon, community! Would you be so kind and help me solve my
        problem. I
        need Deploy application through ClickOnce technology. I've
        configuration
        file
        where I assign sensitive data about connection to the database. A VS
        deploying solution all files have signing by certificate. When I'm
        installing
        application i need immediately change this data (e.g. Server name or
        password) How can i do this correctly?
        >
        Thanks in advance!
        >>
        >>
        >>

        Comment

        Working...