为CAB包制作免费的数字证书签名

在IT行业，第一必须要有激情，第二要有良好的态度，第三要有自信。

1、在DOS环境下(运行cmd)，会用到makecert.exe cert2spc.exe signcode.exe 三个工具。
2、先使用makecert -sv "私钥文件名.pvk" -n "CN=你的信息" -ss My(会有成功提示)。然后打开IE，菜单项中选择“工具－Internet选项－内容－证书－导出”。
3、使用"cert2spc 证书文件名.cer 文件名.spc"　(会有成功提示)。
4、经过打包成.CAB文件：打包工具我选用的是WincCab.exe。
5、双击signcode执行。一、选择被加入证书的文件(应选择那个.CAB文件)；二、选择.spc文件;三、选择.pvk文件;下面就一路NEXT就行了。最后一步要选择时间戳服务器，这里有个免费的：http://timestamp.verisign.com/scripts/timstamp.dll 写上去就完了，这样就完成了签名。

与OCX控件一起打包成CAB文件，要加上INF文件，在MFC中其写法基本如下：
[version]
   signature="$CHICAGO$"
   AdvancedINF=2.0
[Add.Code]
    Right.ocx=Right.ocx
    mfc42.dll=mfc42.dll
    msvcrt.dll=msvcrt.dll
    olepro32.dll=olepro32.dll
[Right.ocx]
    file-win32-x86=Right.cab
    clsid={2BF73409-F25A-475B-AEE3-C7DFC124****}
    FileVersion=1,0,0,1
    RegisterServer=yes
[msvcrt.dll]
    FileVersion=6,0,8168,0
    hook=mfc42installer
[mfc42.dll]
    FileVersion=6,0,8168,0
    hook=mfc42installer
[olepro32.dll]
    FileVersion=5,0,4261,0
    hook=mfc42installer
[mfc42installer]
    file-win32-x86=mfc42.cab
    run=%EXTRACT_DIR%/mfc42.exe

注：OCX控件需要在MFC中静态编译。 "初始化安全"“脚本安全”两个接口：
STDAPI DllRegisterServer(void) { AFX_MANAGE_STATE(_afxModuleAddrThis); if (!AfxOleRegisterTypeLib(AfxGetInstanceHandle(), _tlid)) return ResultFromScode(SELFREG_E_TYPELIB); if (!COleObjectFactoryEx::UpdateRegistryAll(TRUE)) return ResultFromScode(SELFREG_E_CLASS); ICatRegister* pcr = NULL ; HRESULT hr = S_OK ; hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr, NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr); if (SUCCEEDED(hr)) { // Register this category as being "implemented" by the class. CATID rgcatid[2] ; rgcatid[0] = CATID_SafeForInitializing; rgcatid[1] = CATID_SafeForScripting; hr = pcr->RegisterClassImplCategories(_tlid, 2, rgcatid); } if (pcr != NULL) pcr->Release(); return hr; // return NOERROR; } / // DllUnregisterServer - Removes entries from the system registry STDAPI DllUnregisterServer(void) { AFX_MANAGE_STATE(_afxModuleAddrThis); ICatRegister* pcr = NULL ; HRESULT hr = S_OK ; hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr, NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr); if (SUCCEEDED(hr)) { // Unregister this category as being "implemented" by the class. CATID rgcatid[2] ; rgcatid[0] = CATID_SafeForInitializing; rgcatid[1] = CATID_SafeForScripting; hr = pcr->UnRegisterClassImplCategories(_tlid, 1, rgcatid); } if (pcr != NULL) pcr->Release(); if (!AfxOleUnregisterTypeLib(_tlid, _wVerMajor, _wVerMinor)) return ResultFromScode(SELFREG_E_TYPELIB); if (!COleObjectFactoryEx::UpdateRegistryAll(FALSE)) return ResultFromScode(SELFREG_E_CLASS); return NOERROR; }