Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dll files under user profile is not signed #543

Open
primebo opened this issue Apr 11, 2023 · 3 comments
Open

dll files under user profile is not signed #543

primebo opened this issue Apr 11, 2023 · 3 comments

Comments

@primebo
Copy link

primebo commented Apr 11, 2023

There are multiple DLL files under the userprofile that is not signed. When using a applocker policy it is normal to block unsigned dll files under nonprotected paths. prism_sw.dll and prism_d3d.dll is located under C:\Users%username%.openjfx\cache.. and is not signed.

@mkuzmanis
Copy link

Also when using Software restriction policies and adding these as hash exceptions, it causes issues with other software. It is probably windows bug, but makes apps incompatible nevertheless, and unsigned executables/scripts/dlls should not be placed in user writable locations anyway. Can these be moved to %programfiles% or somewhere else, or signed?

@torakiki
Copy link
Owner

Those DLLs are from JavaFX, the UI framework used in PDFsam, and they are extracted and cached there by JavaFX. I don't know if we can maybe extract them, sign them and repackage but it seems a cumbersome solution. Using the solution proposed here #535 (comment) you can set the directory where those DLLs are stored, will this solve the issue with applocker/restrictions policies?

@mkuzmanis
Copy link

Changed installation from assigned application to script. To move cache requires installing software on one PC, running it once to create cache contents, which then have to be copied to share for deployment together with modified cfg file (added line java-options=-Djavafx.cachedir=$APPDIR\cache )
Then added startup powershell script that checks for cache contents and copies config/cache if necessary.
Would still be nice, if cache/config file creation could be added to installer.
pdfsam_postinstall.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants