locked
VS 2005 Web Deployment Project - unable to use .pfx to sign output assembly RRS feed

  • Question

  • User1535730761 posted

    The VS 2005 Web Deployment Project only allows for the use of .snk files for signing purposes.  Our corporate standard uses a .pfx file.

    Is there a way to use a .pfx instead or a way to convert the .pfx to a .snk?

     

    Thursday, January 10, 2008 9:18 AM

Answers

All replies

  • User-2017008401 posted

    Hi PaulIP,

    The purpose of using .snk file is to sign the assembly, so that it (strong-named assembly) can be stored in GAC. Hence .pfx file cannot instead of .snk file. About how to use .pfx file, please refer to the following links:

    How to call a Web service by using a client certificate for authentication in an ASP.NET Web application
    http://support.microsoft.com/kb/901183

    Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication
    http://msdn.microsoft.com/en-us/library/aa302408.aspx

    Support Certificates In Your Applications With The .NET Framework 2.0
    http://msdn.microsoft.com/msdnmag/issues/07/03/NETSecurity/default.aspx

    • Marked as answer by Anonymous Thursday, October 7, 2021 12:00 AM
    Sunday, January 13, 2008 10:06 PM
  • User2096814685 posted
    Hello Benson,

    I am struggling with .snk and .pfx files. In your response to the original poster's question you state that .pfx file can't be used to sign things going into the GAC. This confuses me.

    This post: http://blogs.msdn.com/shawnfa/archive/2006/02/14/531921.aspx at MSDN states that a .pfx is basically a more secure .snk. VS seems to sign anything with a .pfx except for ASP.NET applications. Even then it only seems to complain when doing a Publish or using a Web Deployment Project.

    If these are just VS bugs then fine. However if I am misunderstanding how .snk and .pfx files work I would like to be illuminated.

    Thanks,
    -Mont
    Thursday, June 26, 2008 12:49 PM
  • User-1533967036 posted

     It's completely unappropriate answer to the question.

    The PFX files contain the same information as the SNK files, so they CAN be used for signing (strong-name) assemblies.

    The answer was not WHETHER they can be used but HOW it can be done in Visual Studio that accepts only SNK files for this purpose.

    Thursday, August 20, 2009 9:29 AM