我用VC6做了一个.ocx控件，在IE里...........?

[lgs]

我用VC6做了一个.ocx控件，用于http服务器读取客户端的信息，如ip地址，机器名，以及其他资源，在IE里使用时，IE会提示说该.ocx控件没有数字签名不安全，我应该那里找机构签名？

[windoze]

你说这个控件安全吗？

VC中有一个程序叫signcode，还有一个测试的证书vstest.cer，你可以用这个证书给你的代码签名，但是用户端仍然会出现上述信息，因为你的证书不被用户信任，签名只能确认来源，并不能保证代码是安全的。

如果你要找一个正式的证书，就到VeriSign买一个吧。地址http://www.verisign.com

[lgs]

其实，我早知道要买证书，可惜老板舍不得掏钱，我现在用其他的方法已经解决了；将ocx注册为安全的就不会有提示了。谢谢windoze！

[lgs]

windoze兄；小弟将分给你吧，反正我有的是分！

[windoze]

在控件中实现IObjectSafe是不够的，如果用户将IE的安全级别设定为高，一样会出现警告，在这个级别下，只有包含了有效而且用户已经信任的证书时，控件才会被加载，所以……还是鼓动你的老板掏腰包吧。

[lgs]

我是这样注册的：
1:先添加三个全局函数
// Helper function to create a component category and associated description
HRESULT CreateComponentCategory(CATID catid, WCHAR* catDescription)
{
ICatRegister* pcr = NULL ;
HRESULT hr = S_OK ;
hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,
NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);
if (FAILED(hr))
return hr;
// Make sure the HKCR\Component Categories\{..catid...}
// key is registered
CATEGORYINFO catinfo;
catinfo.catid = catid;
catinfo.lcid = 0x0409 ; // english
// Make sure the provided description is not too long.
// Only copy the first 127 characters if it is
int len = wcslen(catDescription);
if (len>127) len = 127;
wcsncpy(catinfo.szDescription, catDescription, len);
// Make sure the description is null terminated
catinfo.szDescription[len] = '\0';
hr = pcr->RegisterCategories(1, &catinfo);
pcr->Release();
return hr;
}

// Helper function to register a CLSID as belonging to a component category
HRESULT RegisterCLSIDInCategory(REFCLSID clsid, CATID catid)
{
// Register your component categories information.
ICatRegister* pcr = NULL ;
HRESULT hr = S_OK ;
hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,
NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);
if (SUCCEEDED(hr))
{
// Register this category as being "implemented" by
// the class.
CATID rgcatid[1] ;
rgcatid[0] = catid;
hr = pcr->RegisterClassImplCategories(clsid, 1, rgcatid);
}
if (pcr != NULL)
pcr->Release();
return hr;
}

// Helper function to unregister a CLSID as belonging to a component category
HRESULT UnRegisterCLSIDInCategory(REFCLSID clsid, CATID catid)
{
ICatRegister* pcr = NULL ;
HRESULT hr = S_OK ;
hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,
NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);
if (SUCCEEDED(hr))
{
// Unregister this category as being "implemented" by
// the class.
CATID rgcatid[1] ;
rgcatid[0] = catid;
hr = pcr->UnRegisterClassImplCategories(clsid, 1, rgcatid);
}

if (pcr != NULL)
pcr->Release();
return hr;
}

2:将控件类的UpdateRegistry(BOOL bRegister)函数替换如下：
BOOL CLCCBatmanCtrl::CLCCBatmanCtrlFactory::UpdateRegistry(BOOL bRegister)
{
// TODO: Verify that your control follows apartment-model threading rules.
// Refer to MFC TechNote 64 for more information.
// If your control does not conform to the apartment-model rules, then
// you must modify the code below, changing the 6th parameter from
// afxRegApartmentThreading to 0.

if (bRegister)
{
HRESULT hr = S_OK;
//register as Safe for Scripting
hr = CreateComponentCategory(CATID_SafeForScripting,
L"Controls that are safely scripting");
if(FAILED(hr))
return FALSE;

hr = RegisterCLSIDInCategory(m_clsid,CATID_SafeForScripting);
if(FAILED(hr))
return FALSE;

//register as safe for initializing
hr = CreateComponentCategory(CATID_SafeForInitializing,
L"Controls safely initializing form persistent data");
if(FAILED(hr))
return FALSE;

hr = RegisterCLSIDInCategory(m_clsid,CATID_SafeForInitializing);
if(FAILED(hr))
return FALSE;

return AfxOleRegisterControlClass(
AfxGetInstanceHandle(),
m_clsid,
m_lpszProgID,
IDS_LCCBATMAN,
IDB_LCCBATMAN,
afxRegApartmentThreading,
_dwLCCBatmanOleMisc,
_tlid,
_wVerMajor,
_wVerMinor);
}
else
{
HRESULT hr = S_OK;

hr = UnRegisterCLSIDInCategory(m_clsid,CATID_SafeForScripting);
if(FAILED(hr))
return FALSE;

hr = UnRegisterCLSIDInCategory(m_clsid,CATID_SafeForInitializing);
if(FAILED(hr))
return FALSE;

return AfxOleUnregisterClass(m_clsid, m_lpszProgID);
}
}
OK!