Digitally signed OpenEdge 12.8.6 executable are either signed by expired certificates or certificates that will only be valid for a few months

Feb 14, 2025
Knowledge

Title

URL Name

digitally-signed-openedge-12-8-6-executable-are-either-signed-by-expired-certificates-or-certificates-that-will-only-be-valid-for-a-few-months

Article Number

000277315

Environment

Product: OpenEdge Release: 12.8.6 OS: Windows

Question/Problem Description

Digitally signed OpenEdge 12.8.6 executable are either signed by currently expired certificates or certificates that will only be valid for a few months

The following files in OpenEdge 12.8.6:

admsrvc.exe
conspawn.exe
dbf.exe
ini2reg.exe
proobjvw.exe
sslc.exe
UpdAsmRef.exe

are signed by expired certificates (expired on 03/11/2024 12:20:35)

While the other certificates are signed by a certificate set to expire this year on 11/27/2025 06:45:04:

checkkey.exe
dbtool.exe
jvmStart.exe
jvmStartw.exe
ProAsmRef.exe
prodb.exe
prodel.exe
prolib.exe
prowin.exe
quoter.exe
rpagent.exe
rprepl.exe
rpserver.exe
showcfg.exe
showcfgd.exe
showvers.exe
sqlsh.exe
stsclientutil.exe
stskeyutil.exe
tocp850.exe
toisol1.exe
_dbagent.exe
_dbutil.exe
_debugConfig.exe
_debugEnable.exe
_logview.exe
_mproapsv.exe
_mprosrv.exe
_mprshut.exe
_mtprosrv.exe
_progres.exe
_proinventory.exe
_proutil.exe
_rfutil.exe
_sqldump.exe
_sqlload.exe
_sqlschema.exe
_sqlsrv2.exe

Steps to Reproduce

Powershell code to run in the Windows PowerShell ISE to verify the expiration date of a signing certificate for an OpenEdge executable: #cls $filename = "C:\Progress\OpenEdge128\bin\prowin.exe" #$filename = "C:\Progress\OpenEdge128\bin\admsrvc.exe" $signed = Get-AuthenticodeSignature $filename if ($signed.Status -eq 'Valid') { Write-Output "File is signed." } else { Write-Output "File is not signed." } $signed.Path $signed.SignerCertificate.Subject $signed.SignerCertificate.GetExpirationDateString() The powershell code will output something like: File is signed. C:\Progress\OpenEdge128\bin\prowin.exe CN=Progress Software Corporation, O=Progress Software Corporation, STREET=15 Wayside Rd Ste 4, L=Burlington, S=Massachusetts, C=US, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311 .60.2.1.3=US, SERIALNUMBER=5743582, OID.2.5.4.15=Private Organization 10/27/2024 3:45:04 PM <-------- the expiration date of the signing certificate

Clarifying Information

The expired code-signing certificate trigger the end user antivirus/endpoint protection, which requires an exception rule to be created.

Error Message

Defect Number

OCTA-75710

Enhancement Number

Cause

This is expected behavior.

As long as the executables are signed, with a signing certificate that was valid at the time of signing, all is well, and the executables are considered signed and valid.

The signing certificate need to be renewed on a yearly basis, and will therefore always show to be valid for only a few months.

Resolution

Contact the antivirus/endpoint protection software being used to change the wrong behavior regarding labelling as insecure some of the signed OpenEdge executables.

Workaround

Create exception rules in the antivirus/endpoint protection software being used for all the OpenEdge executables incorrectly being labelled as insecure.

Notes

Keyword Phrase

Last Modified Date

2/14/2025 8:43 AM

Digitally signed OpenEdge 12.8.6 executable are either signed by expired certificates or certificates that will only be valid for a few months

Files(0)

Was this article helpful?

Was this article helpful?

Digitally signed OpenEdge 12.8.6 executable are either signed by expired certificates or certificates that will only be valid for a few months

Information

Related Articles