Internet Explorer将有效证书显示为“已损坏或无效的签名”

问题描述:

我们使用SignTool.exe和GoDaddy证书签署了我们的产品安装,我们的签名在Windows中有效,并使用SignTool的验证选项。但是,当文件在Internet Explorer 9中下载时,它会报告签名已损坏或无效。

We have signed our product installation using SignTool.exe and GoDaddy certificate, and our signature appears valid in windows and using "verify" option of SignTool. However, when the file is downloaded in Internet Explorer 9, it reports that "The signature of is corrupt or invalid".

我们显然不希望我们的用户安装我们的设置的问题,所以我需要帮助修复它。很奇怪,这个问题在线上基本上没有帮助。

We obviously don't want our users to have problems with installation of our setup, so I need help in fixing it. Strange that there is basically no help on this issue online.

我通过试验和错误发现,这是由Windows更新破坏IE:

I've discovered through trial and error that this is caused by a Windows update that breaks IE:

Internet Explorer的累积安全更新(2870699) - 2013年9月10日发布

Cumulative Security Update for Internet Explorer (2870699) - published Sept. 10, 2013

http://support.microsoft.com/kb/2870699

http://technet.microsoft.com/en-us/security/bulletin / ms13-069

我安装了所有最新的更新,并能够重现问题。我然后卸载这个单一的更新,它解决了问题。然后我重新安装了更新,它又崩溃了。

I installed all of the latest updates and was able to reproduce the problem. I then uninstalled this single update and it fixed the problem. I then reinstalled the update and it was broken again.

这很糟糕!