[Ohrrpgce] [ohrrpgce:bugs] Re: #2030 The Windows installer is blocked on Windows 8+

[TeeEmCee]

(Argh, so replying to sourceforge bug emails does (very brokenly) work, but I will never do it again!)

There's a long readme about SDL 2's WinRT/UWP support: https://github.com/spurious/SDL-mirror/blob/master/docs/README-winrt.md
The compile process does look a bit painful. I wonder whether we will be able to compile using FB's gas backend, or whether we need to compile to C and compile that with Visual C++. FB's C output is GCC-specific and doesn't even compile with clang, which is very highly compatible with GCC, let alone the notoriously standards-defying Visual C++.

Anyway, I think the best workaround for this bug is to add a note to the Downloads page with instructions for unblocking the installer. Likewise for the Mac OSX app (isn't that blocked by default too?)

Also, I forgot to say apparently even if we did pay for a certificate and sign the installer, it would still be blocked by default, until it's built up enough "reputation", unless you pay for a far more expensive EV certificate! I don't know how it's meant to build up reputation when it's blocked.


---

** [bugs:#2030] The Windows installer is blocked on Windows 8+**

**Status:** open
**Milestone:** OHRRPGCE
**Labels:** smartscreen signing 
**Created:** Wed Nov 29, 2017 08:08 AM UTC by TeeEmCee
**Last Updated:** Wed Nov 29, 2017 05:15 PM UTC
**Owner:** nobody


Apparently all downloaded .exe files are blocked on Windows 8+ by Windows SmartScreen with the message ([example](https://github.com/mintty/wsltty/issues/32#issuecomment-289281120)) if they haven't been signed. (Reported by Ichiro.) By default, SmartScreen does not offer an option to bypass the block. To run the .exe installer, apparently you need to either right-click it and unblock in the Properties dialog, or you need to disable SmartScreen blocking of programs, or at least set it to just warn instead of block.
Unfortunately, it doesn't seem to be possible to sign a program without buying a code signing certificate from a CA offering code signing (not just HTTPS certificates), starting from roughly $30 for open source software.

This post has lots of details about the process: https://github.com/mintty/wsltty/issues/32#issuecomment-340450073

See also https://stackoverflow.com/questions/12311203/how-to-pass-the-smart-screen-on-win8-when-install-a-signed-application

Apparently there are two workarounds
* put the installer .exe in a zip (or alternatively, don't use the installer)
* distribute the installer through the Windows Store, because SmartScreen doesn't apply to that, and you don't have to buy a certificate (although you do have to sign everything). You do need to pay a one-off fee of $19 to get access to the dev program, but that also allows you to develop and publish Xbox One games, so it's a great deal compared to Apple


---

Sent from sourceforge.net because ohrrpgce at lists.motherhamster.org is subscribed to https://sourceforge.net/p/ohrrpgce/bugs/

To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/ohrrpgce/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.motherhamster.org/pipermail/ohrrpgce-motherhamster.org/attachments/20171130/df49b644/attachment.html>