Computer implemented method and a computer system to prevent security problems in the use of digital certificates in code signing and a computer program product thereof

摘要

A computer implemented method, a computer system and computer program product to prevent security problems in the use of digital certificates in code signing, The computer implemented method comprising a software distributor signing via a first server (300) at least one software file using a digital certificate with a digital signature and at least one user via a computing device (100) acquiring a copy of said signed software file, wherein said digital certificate to be used is previously recorded in a second server (200) in communication with said first server, the digital certificate to be recorded being provided by the software distributor upon a registration of the latter in said second server (200) and including information obtained from a trust certificate chain associated to the digital certificate when performing said registration, the second server (200) generating, upon a request made by the software distributor, a hashstamp of the signed software file.