From 8f10cff92325448e84ae3317c3b2b100173bf619 Mon Sep 17 00:00:00 2001
From: Simon Rozman <simon@rozman.si>
Date: Tue, 24 May 2016 10:31:11 +0200
Subject: [PATCH] Digital signatures reverted to SHA-1 for Windows XP and Vista
 support

---
 include/Debug.props   | 8 +++++++-
 include/Release.props | 8 +++++++-
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/include/Debug.props b/include/Debug.props
index 32de5ae..9400f30 100644
--- a/include/Debug.props
+++ b/include/Debug.props
@@ -41,7 +41,13 @@
   <ItemGroup />
   <Target Name="Sign" Condition="'$(ManifestCertificateThumbprint)' != '' and ('$(ConfigurationType)' == 'Application' or '$(ConfigurationType)' == 'DynamicLibrary')" AfterTargets="_Manifest" BeforeTargets="RegisterOutput" Inputs="$(OutDir)$(TargetName)$(TargetExt)" Outputs="$(IntDir)$(TargetName).sign">
     <Message Text="Signing output file..." />
-    <SignFile CertificateThumbprint="$(ManifestCertificateThumbprint)" SigningTarget="$(OutDir)$(TargetName)$(TargetExt)" />
+	<!--
+		To make Windows XP and Vista compliant signatures, the binaries have to be signed using SHA1.
+		<SignFile> switches to SHA256 if the signing certificate is SHA256.
+		Reverted to signtool.exe until we can drop Windows XP and Vista support.
+	-->
+	<!--<SignFile CertificateThumbprint="$(ManifestCertificateThumbprint)" SigningTarget="$(OutDir)$(TargetName)$(TargetExt)" />-->
+	<Exec Command="signtool.exe sign /du &quot;http://www.amebis.si&quot; /sha1 &quot;%ManifestCertificateThumbprint%&quot; /fd sha1 /q &quot;$(TargetPath)&quot;" />
     <Touch Files="$(IntDir)$(TargetName).sign" AlwaysCreate="true" />
   </Target>
 </Project>
\ No newline at end of file
diff --git a/include/Release.props b/include/Release.props
index 58eecb8..ef5d9f0 100644
--- a/include/Release.props
+++ b/include/Release.props
@@ -61,7 +61,13 @@
   <ItemGroup />
   <Target Name="Sign" Condition="'$(ManifestCertificateThumbprint)' != '' and ('$(ConfigurationType)' == 'Application' or '$(ConfigurationType)' == 'DynamicLibrary')" AfterTargets="_Manifest" BeforeTargets="RegisterOutput" Inputs="$(OutDir)$(TargetName)$(TargetExt)" Outputs="$(IntDir)$(TargetName).sign">
     <Message Text="Signing output file..." />
-    <SignFile CertificateThumbprint="$(ManifestCertificateThumbprint)" TimestampUrl="$(ManifestTimestampUrl)" SigningTarget="$(OutDir)$(TargetName)$(TargetExt)" />
+	<!--
+		To make Windows XP and Vista compliant signatures, the binaries have to be signed using SHA1.
+		<SignFile> switches to SHA256 if the signing certificate is SHA256.
+		Reverted to signtool.exe until we can drop Windows XP and Vista support.
+	-->
+	<!--<SignFile CertificateThumbprint="$(ManifestCertificateThumbprint)" TimestampUrl="$(ManifestTimestampUrl)" SigningTarget="$(OutDir)$(TargetName)$(TargetExt)" />-->
+	<Exec Command="signtool.exe sign /du &quot;http://www.amebis.si&quot; /sha1 &quot;%ManifestCertificateThumbprint%&quot; /fd sha1 /t &quot;%ManifestTimestampUrl%&quot; /q &quot;$(TargetPath)&quot;" />
     <Touch Files="$(IntDir)$(TargetName).sign" AlwaysCreate="true" />
   </Target>
 </Project>
\ No newline at end of file