ISPP.dll and signature

93 views
Skip to first unread message

Pascal Quélen

unread,
Jun 10, 2025, 12:46:42 AM6/10/25
to innosetup
Hi,
I have modified ISPP.dll to support pascal script for pre processing.
I use modified ISPP since long time and i recompile my ISPP for each new innosetup version.
Since ISPP signature is checked with ISPP.dll.issig i can't do it now because my new ISPP is rejected by innosetup.

Is it possible to modify ISPP and use it with inno setup with the new signature mecanism ?
Is it possible to recompile ISPP.dll without recompiling InnoSetup ?

Martijn Laan

unread,
Jun 10, 2025, 1:15:42 AM6/10/25
to innosetup
It the current version it's not possible to turn of this verification but in the next version it will be. 

Greetings,
Martijn

Op di 10 jun , Pascal Quélen <pascal...@gmail.com> schreef:
--
You received this message because you are subscribed to the Google Groups "innosetup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to innosetup+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/innosetup/ec97ee4d-b4eb-4f72-b41c-6a432904e93an%40googlegroups.com.

Gavin Lambert

unread,
Jun 10, 2025, 1:27:13 AM6/10/25
to innosetup
On Tuesday, June 10, 2025 at 5:15:42 PM UTC+12 Martijn Laan wrote:
It the current version it's not possible to turn of this verification but in the next version it will be. 

Perhaps rather than (or as well as) turning it off, there could be an IDE setting or similar to let the compiler trust additional signatures?

Martijn Laan

unread,
Jun 10, 2025, 1:52:16 AM6/10/25
to innosetup
The two public keys it trusts are hardcoded and protected by the Authenticode signature. Allowing non-protected keys would render the verification useless.

Do note that if you would rebuild not just ISPP.dll but also the IDE by using the build script then automatically one of the two built-in keys will be your own instead of one of mine. 

Greetings,
Martijn


Op di 10 jun , Gavin Lambert <i...@mirality.co.nz> schreef:
On Tuesday, June 10, 2025 at 5:15:42 PM UTC+12 Martijn Laan wrote:
It the current version it's not possible to turn of this verification but in the next version it will be. 

Perhaps rather than (or as well as) turning it off, there could be an IDE setting or similar to let the compiler trust additional signatures?

--
You received this message because you are subscribed to the Google Groups "innosetup" group.
To unsubscribe from this group and stop receiving emails from it, send an email to innosetup+...@googlegroups.com.

t.sl...@gmail.com

unread,
Jun 20, 2025, 6:03:23 AM6/20/25
to innosetup
Hello.

We had the same issue with signatures in Graphical Installer for Inno Setup.

At this moment we rebuilt the .dll completely without this feature.

When new version is released we can reconsider this approach.

Martijn Laan

unread,
Jun 20, 2025, 9:21:55 AM6/20/25
to innosetup
Hi,

Op vrijdag 20 juni 2025 om 12:03 schreef t.sl...@gmail.com <t.sl...@gmail.com>:

We had the same issue with signatures in Graphical Installer for Inno Setup.

Can you elaborate which issue you had and why? Does Graphical Installer modify one of the Inno Setup files?

At this moment we rebuilt the .dll completely without this feature. 

Which .dll?

Greetings,
Martijn
Reply all
Reply to author
Forward
0 new messages