Comments (18)
I am also interested in this project and my company has an EV Signing Code cert.
We can always sign them for testing.
But I think as @cezuni said it is too early for this kind of things.
This project is at initial phase and I think there will be lots of phases.
My company is looking for an open source Remote USB solution & so I am watching this project.
Donation always could be on the desk.
Regards,
from usbip-win.
@yelfarri : Thanks, I'll try to read a link. (I slightly edited your comment because link is not working)
https://www.osr.com/blog/2015/07/24/questions-answers-windows-10-driver-signing/
@cezuni this more a case of thinking about the future and getting some inputs from people.
from usbip-win.
@yelfarri : Thanks, I'll try to read a link. (I slightly edited your comment because link is not working)
https://www.osr.com/blog/2015/07/24/questions-answers-windows-10-driver-signing/
@cezuni this more a case of thinking about the future and getting some inputs from people.
Thanks for invite :D, sure if i find something about signing i will write it here to keep the thread public and accessible for every body :).
from usbip-win.
@cezuni The attestation route will be the most possible for our case. As Microsoft announced that Windows 7 reached the end of life and support will end 14 January 2020. I can argue from our case I find the case of attestation the most favorable. The Hardware Compatibility route and attestation route both require a set of steps to be fulfilled but as I said in the early post the later does not require to pass any tests from Microsoft.
The attestation route requirements are described well in the following article but since I know you don't have a lot of time I will write a quick summary :).
The New requirements from microsoft means the following
- The “old” way meant you — as the software developer — use your certificate to sign your software. Since your certificate is cross-signed by a certification authority (CA) that is (in the end) trusted by Microsoft this ensures that no one could tamper with the file and that Microsoft trusts that you are who you claim you are.
- The “new” way means that you submit your software to Microsoft and they add their certificate, provided all the requirements are met.
- For that, you need an EV code signing certificate, there is no way around it. This basically means, it’s more expensive and it comes on an USB hardware token (so you cannot copy it).
The link describeds the steps needed for achieve signed driver from microsoft
- Getting an Extended Validation(EV) certificate this can be purched from https://www.globalsign.com/en/ the article says that the certificate will costed (2016-09-09) about 709€ for 3 years.
- Getting the Microsoft Signature need a Microsoft sysdev account to submitt the required files to microsfts for a secound signing the process is explained in details in article linked
@cezuni Can we have a skype chat about this ? I might have some ideas how to do this but i need your permission
from usbip-win.
@yelfarri : To be honest, usbip-win driver is not stable for signing. Although usbip-win drivers still have many flaws, signed driver would be nice. I will agree to your idea if you do not send me bills for EV. 😄I'm ready to listen your idea with written language. (Forgive me to refuse skype chat due to my hell conversation)
from usbip-win.
@cezuni No worries we can skip the skype part. I understand that the driver is not yet ready to be signed again. The way I see it we need to figure out how to get verification. Like you said EV bill and the fact that Microsoft requires an organization to submit a driver, not individuals.
The issues on hand
-
How to pay for EV bill? I have been in discussion with some individuals/companies who are interested in backing this project to obtain an EV certificate. I refer them to your GitHub where they liked what they saw. Please add some of your ideas to this
- Our conditions that this should stay open source and should not be altered based on their interests
- Their conditions that all the donate on the condition that the money will result in a signed driver
-
I would love to contribute to the project. Can we set a donation page to collect money to fund EV certificate? So any fan/user can help out in making this possible. With that, we might need to members including you to oversees that the contributions are going to the goal of making this open project succeed. using https://www.patreon.com/
Since your the one who owns this project you get to select people that can oversee this. -
We are not an organization thus we cannot submit the driver to Microsoft(if I m wrong, please correct me)... How can we solve this?
Should we become an organization to be able to control the signature of the driver? What do you think about this? Do you have any ideas?
I want this USBIP windows to survive the time, and the only way to do so is by building a community that is actively maintaining and using this solution.
Just to be clear i have no financial interests or gains doing this. Just long waiting for a solution and ability to export USB devices between Linux and windows.
from usbip-win.
@yelfarri : I deeply understand your concerns. However, my bottom line opinion is that usbip-win requires a development more than a certificate. 😄
My answers to your issues:
- Welcome!! Nothing to be addressed more. However, using the company's certificate will be more feasible instead of creating a new one.
- I think that a donation page requires more quality for usbip-win. Should we take a deep breadth?
- It's not easy to build up a organization for this project. I heard that there exists a specialized group to support open source project such as letsencrypt.
from usbip-win.
@cezuni I agree that more development is needed :).
- I see I will tell them that
- sure than that something we can work. Do you have any idea on areas you will like to improve ? Can we make an overview over functionality that needs to be improved ? no one knows the code better than you ;)
- I just learned something new today :). I will point those companies to letsencrypt. Is there an equivalent organization for windows products ?
from usbip-win.
@yelfarri : I mean that usbip-win is too unstable to get donation, at least right now. 😢 Maybe we need bug fixes instead of improvement.
For 3, it's sad that letsencrypt does not provide a EV certificate.
from usbip-win.
@doganmurat and @cezuni yeah agree that the code needs multiple phases to be considered for signing. My goal is to start a discussion about the process early. By doing so, we can capture the interests of people who want to pitch in with ideas :). It is good that there are more people interested in this. Where I work and where my friend's work we are interested in finding a way to use @cezuni 's driver. Where I work, we do have an EV signing code cert as well. I can sign a driver for my self, but I think it is fair that companies who use @cezuni work at least give support to the project as engineering hours(debugging, development...) or donations. In that way, we give back to the community.
from usbip-win.
@yelfarri My question is not caused by the driver signature.
from usbip-win.
@zhLoser01 I see that @cezuni answer you in #32. Can we keep these issues only about driver signing :)
from usbip-win.
@yelfarri : How about closing this old issue? If needed, reopen it or start with a new issue page.
from usbip-win.
https://www.globalsign.com/en/ssl/ssl-open-source/ for open projects the certificate is free this does not fit
from usbip-win.
https://sourceforge.net/projects/signed-drivers/ It seems here can help with driver signing
from usbip-win.
@Ilia1 : Thanks for information. I have dropped the request in the project site.
from usbip-win.
Hi all,
above all: thanks to cezuni for this great piece of work! I'd also love to use it with signed drivers as disabling Secure Boot in UEFI exposes a security risk. I would also be willing to donate some amount to support driver signing, even if it's still in beta state. Maybe having the drivers signed by the ReactOS people would be an option? This has been mentioned already by somebody else. The predecessor Windows client from 2011 was also signed by ReactOS.
Best regards, xoocoon
from usbip-win.
@xoocoon : Alas, ReactOS seems to no longer support driver signing. Anyway, I remember you when a donation is required someday. 😄
from usbip-win.
Related Issues (20)
- About debug in VS2019
- USB microphone does not work (does not transmit a signal). USB flash works
- Attaching remote device by VID rather than BUS ID HOT 6
- is it possible to use usbip inside a remote desktop session together with a wacom tablet?
- failed to attach, code:-6 HOT 1
- usbip:error:attacher.exe not found
- Device shows up on client, but stops working after attached HOT 1
- Xbox Wireless Adapter for Windows Attaches but unable to associate controller HOT 11
- python hid.py usbip.py
- Driver signing / Microsoft
- Merge in upstream?
- Confused about the notes on release usbip-win 0.3.6-dev HOT 1
- Unable to Bind More Than 12 USB Devices Using USB IP Solution
- Device from Linux server on Windows client disconnects after 3 seconds
- USBIP error on attach with: usbip: error: failed to attach on client and usbipd: info: request 0x8003(5): failed on server
- Camera issues HOT 3
- Device is "Unstably bound"
- UDE Driver conflicts with Parsec's Virtual USB device driver
- swiotlb buffer is full (sz: 524288 bytes), total 32768 (slots), used 4 (slots)
- connected device is not realy connected (W11 / 24H2) HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from usbip-win.