Tag Archives: digital signiture

FileUnsigner – Remove digital certificates from files

This small tool was created to simplify the process that was discussed at Remove digital signature from a file using C# and simply aid the people that didn’t have the knowledge on how to compile the code posted there.

This is a small standalone tool that will simply remove the digital signature of any file.

The usage is fairly simple. Either drag and drop the files you want to unsign on the application or use command prompt with the following parameters:

FileUnsigner.exe <options> <file1> <file2> …

Current Options:
/f            Forces the program to remove a digital signiture even if one is not detected.

Remove digital signature from a file using C#

There are two reasons why you might want to consider removing the digital signature from some of the files you are using, especially third party libraries.

The first reason is because in many cases it will greatly speed up your programs start-up time. The reason for that is because if a file is signed with Microsoft digital certificate as an example on runtime it will attempt to verify the signature which in most cases it requires an internet connection. In cases where the user might not have an active internet connection or if the verification attempt is blocked by a firewall or any other reason, it will greatly increase the time your application will take to start.

Another important reason for removing a digital signature from a library you want to distribute alongside with your software is that a lot of users feel alarmed when an application tries to establish a connection at start-up, especially if the type of the application you are making doesn’t sound like the type it requires to connect somewhere.

Thankfully it is fairly easy to remove a signature from a file using the ImageRemoveCertificate API function. Below you can find a snippet that illustrates how it can be implemented.

If you would like to use the above code but have no knowladge on how to compile it then simply download the already compiled version from FileUnsigner v1.0.