In .NET platform, a strong name consists of the assembly's identity—its simple text name, version number, and culture information (if provided)—plus a public key and a digital signature. It is generated from an assembly file (the file that contains the assembly manifest, which in turn contains the names and hashes of all the files that make up the assembly), using the corresponding private key.
Questions tagged [strongname]
355 questions
274
votes
16 answers
How to fix "Referenced assembly does not have a strong name" error
I've added a weakly named assembly to my Visual Studio 2005 project (which is strongly named). I'm now getting the error:
"Referenced assembly 'xxxxxxxx' does not have a strong name"
Do I need to sign this third-party assembly?
ng5000
- 12,330
- 10
- 51
- 64
225
votes
12 answers
“Unable to find manifest signing certificate in the certificate store” - even when add new key
I cannot build projects with a strong name key signing - the message in the title always comes up.
Yes the project was initially copied over from another machine. However even if I add a new key via the Signing tab in Project Properties, this error…
Marcus
- 9,011
- 10
- 45
- 65
171
votes
5 answers
What is a .snk for?
What is a .snk file for? I know it stands for Strongly Named Key, but all explanations of what it is and how it works goes over my head.
Is there any simple explanation on how a strongly named key is used and how it works?
webdtc
96
votes
10 answers
Anything wrong with NOT signing a .NET assembly?
One of my colleagues is very keen on signing assemblies. He literally tries to sign anything. Even when we use assemblies from Microsoft that are not signed, he will take the source code, sign it and then ask other developers to use his copy…
oscarkuo
- 10,431
- 6
- 49
- 62
54
votes
10 answers
How do I find the fully qualified name of an assembly?
How do I find out the fully qualified name of my assembly such as:
MyNamespace.MyAssembly, version=1.0.3300.0,
Culture=neutral, PublicKeyToken=b77a5c561934e089
I've managed to get my PublicKeyToken using the sn.exe in the SDK, but I'ld like to…
Ian G
- 29,468
- 21
- 78
- 92
40
votes
4 answers
How can I see the strong name of my assembly?
I have a project, and I created a strong name key file for it.
How can I tell what the strong name of my assembly is? It seems this should be obvious, but I can't find any reference to it.
Jeremy Holovacs
- 22,480
- 33
- 117
- 254
32
votes
2 answers
What is a "STRONG NAME" in .NET?
Possible Duplicate:
What is strong naming and how do I strong name a binary?
Actually, yesterday I attended an interview. There they asked me 1 question about strong name. I was not able to guess what it is? please explain about this. Thanks.
John
29
votes
4 answers
.NET: Should executables be strong-name signed? What about private DLLs?
My application consists of three assemblies: a single EXE which references a couple of DLLs. The DLLs are private to my application - they are used only by this executable.
Should these assemblies be given a strong name?
FxCop suggests that they…
user200783
- 13,722
- 12
- 69
- 135
27
votes
4 answers
.NET OpenSource projects and strong named assemblies?
I am currently thinking about open-sourcing a project of mine and am in the process of preparing the source code and project structure to be released to the public. Now I got one question: how should I handle the signature key for my assemblies?…
Martin C.
- 12,140
- 7
- 40
- 52
27
votes
6 answers
How can I profile Signed Assemblies with VS 2010 or VS 2013
I have a website that uses AjaxControlToolkit.dll and Log4Net.dll.
When I try to run the performance profiling tool in VS 2010 on it it gives me the following warning:
AjaxControlToolkit.dll is signed and instrumenting it will invalidate its…
Storm
- 4,307
- 11
- 40
- 57
26
votes
1 answer
snk vs. code signing certificate
In my organization we use snk files with strong names assemblies. We generate the snk ourselves.
In addition we use a code signing signature on the binaries. We get the pfx from Verisign.
What is the difference between these two processes?
Isn't it…
Yaron Naveh
- 23,560
- 32
- 103
- 158
25
votes
5 answers
Signing assemblies with strong name using pfx and visual studio
So here is the problem: We have decided to buy a code signing certificate, we bought one from Godaddy which was in p12 format.
After researching I found out that p12 and pfx is the same thing with a different extension so I renamed it to pfx. I also…
Ares
- 1,356
- 1
- 9
- 22
22
votes
4 answers
Does code-signing without strong-naming leave your app open to abuse?
Trying to get my head around authenticode code-signing and strong-naming.
Am I right in thinking that if I code-sign an exe that references a few dlls (not strong named) that a malicious user could replace my DLLs and distribute the app in a way…
Danny Tuppeny
- 40,147
- 24
- 151
- 275
22
votes
5 answers
Can strong naming an assembly be used to verify the assembly author?
I have been reading the proper article in MSDN, Strong-Named Assemblies and a related Stack Overflow question, Checking an assembly for a strong name.
To which extent can a strong-named assembly be verified to avoid tampering?
Is it possible to use…
Pablo Marambio
- 1,562
- 1
- 15
- 29
21
votes
1 answer
Proper way to digitally sign the application having referenced assemblies
I have an application that has 1 referenced assembly (test.exe, test.dll)
What I want is when the test.exe runs, it should show publisher name as "TestCompany".
To do that, I digitally signed it and it does what I want. And if I alter one byte of…
xmen
- 1,947
- 2
- 25
- 47