Hello.  I am developer who makes some software that is available for download as an executable file from the internet.  I recently noticed that when people download the file in Internet Explorer, it gives an error message that says "The signature of this program is corrupt or invalid."  This error message makes it hard (but not impossible) for our users to run the program.

I have reproduced this problem on my computer which runs Internet Explorer 10.0.9200.16686 and Windows 7 64-bit SP1.  Here is a picture of the error message I am getting:

I inspected the signature of the file in the Properties window and it looks totally fine.  Can someone please tell me why Internet Explorer is rejecting the signature and what I can do about it?

You can inspect the file and its signature yourself if you want; it is available for download here:

http://www.davidegrayson.com/keep/sign_exe_130918/svp2.exe

The file was signed with a SHA1 code signing certificate from Go Daddy, using the following command:

"C:\Program Files (x86)\Windows Kits\8.0\bin\x64\signtool" sign /v /t http://tsa.starfieldtech.com /r "Go Daddy Class 2 Certification Authority" /n "Pololu Corporation" /sha1 300cbc06f4c9be4e313ed48fdc9d2dd8a5b862be %1

I am eager to learn what is happening here because I do not want our users to see this error message.  Also, it is valuable information that I would add to the long article I wrote, Practical Windows Code and Driver Signing.

I clicked on the "Learn More" link but it took me to a very generic Microsoft Support page with no information about that particular error message.  I also searched with Google.

--David Grayson