can't sign files bigger than 1 GB

[amatcovici]

Hello,

I have a VeriSign Class 3 Code Signing 2009-2 CA certificate and I'm trying
to sign an executable file which is bigger than 1 GB, but I always get this
error message: "The Digital Signature wizard did not complete."
Is there a size limitation for signing files with signtool? If yes, how can
files bigger than 1 GB can be signed?

Thank you in advanced.

 

[Paul]

amatcovici wrote:
> Hello,
>
> I have a VeriSign Class 3 Code Signing 2009-2 CA certificate and I'm trying
> to sign an executable file which is bigger than 1 GB, but I always get this
> error message: "The Digital Signature wizard did not complete."
> Is there a size limitation for signing files with signtool? If yes, how can
> files bigger than 1 GB can be signed?
>
> Thank you in advanced.

This is what my search engine found. I have no idea what the
implications are, of using an alternate technique.

*******

http://msdn.microsoft.com/en-us/library/Aa387764

"When signing an executable file that is larger than approximately
300 megabytes for use on a computer running Windows XP with
Service Pack 2 (SP2) and later, you should use catalog signing with
the MakeCat tool rather than use the SignTool tool. Depending on the
available system resources of the computer on which the file is verified,
some applications may not be able to verify the binary signature of a
large file. For more information, see KB article 922225."

http://support.microsoft.com/kb/922225

MakeCat

http://msdn.microsoft.com/en-us/library/aa386967.aspx

Paul