MySQL Bugs: #66461: Windows binary files (.exe and .dll) not signed.

Bug #66461	Windows binary files (.exe and .dll) not signed.
Submitted:	20 Aug 2012 12:22	Modified:	26 Jan 2017 6:29
Reporter:	Thomas Hedberg	Email Updates:
Status:	Won't fix	Impact on me:	None
Category:	MySQL Server: Packaging	Severity:	S3 (Non-critical)
Version:		OS:	Windows
Assigned to:		CPU Architecture:	Any
Tags:	signed .exe .dll

View
Add Comment
Files
Developer
Edit Submission
View Progress Log
Contributions

Description:
The binary files of the MySQL Server isn't signed. In order to utilize the Applocker feature of Windows Server 2008 R2 (Where you can create a whitelist of approved vendors) it would be nice if all files (including .DLL's etc) were signed by MySQL.

It would make it possible to more easily secure servers and verify that the binary is released by MySQL. 

How to repeat:
Right the binary files and verify there isn't a signature on them. 

Suggested fix:
Sign them with a MySQL certificate before packaging.

There are technical difficulties (performance) with having a correct signing process for individual files in our packages. Hence we will not be fixing this problem.