From e173ed8aa2723a8ab3b4d16b8b1a0d1f877978c8 Mon Sep 17 00:00:00 2001 From: Simon Rozman Date: Wed, 13 Oct 2021 09:17:34 +0200 Subject: [PATCH] Upgrade code signing to SHA-256 Signed-off-by: Simon Rozman --- MSI/MSICA | 2 +- README.md | 4 ++-- include/Debug.props | 8 +------- include/Release.props | 8 +------- 4 files changed, 5 insertions(+), 17 deletions(-) diff --git a/MSI/MSICA b/MSI/MSICA index ef5e73f..f943510 160000 --- a/MSI/MSICA +++ b/MSI/MSICA @@ -1 +1 @@ -Subproject commit ef5e73f72f57a0cc7e1e943918b1203c18839f98 +Subproject commit f943510140b067645a42864a99a5e196f64cccc6 diff --git a/README.md b/README.md index bd3c138..051ee00 100644 --- a/README.md +++ b/README.md @@ -40,8 +40,8 @@ In order to have the build process digitally sign output files, one should provi 1. A signing certificate installed in the current user's certificate store. 2. The following variables in the environment: - - `ManifestCertificateThumbprint` - set the value to certificate's SHA1 thumbprint (hexadecimal, without spaces, i.e. `bc0d8da45f9eeefcbe4e334e1fc262804df88d7e`). - - `ManifestTimestampUrl` - set the value to URL used to perform timestamp signature (i.e. `http://timestamp.verisign.com/scripts/timstamp.dll`). In order to perform timestamp signing successfully, the computer running the build should be online and able to access this URL. + - `ManifestCertificateThumbprint` - set the value to certificate's SHA1 thumbprint (hexadecimal, without spaces, i.e. `f61b973226c502a732d24f41aa85e192b009e7c0`). + - `ManifestTimestampRFC3161Url` - set the value to URL used to perform RFC3161 timestamp signature (i.e. `http://time.certum.pl`). In order to perform timestamp signing successfully, the computer running the build should be online and able to access this URL. Please note that only Release builds are configured for timestamp signing. Debug configurations do not attempt to timestamp sign the resulting DLL and EXE files in order to speed up the building process and enable offline building. diff --git a/include/Debug.props b/include/Debug.props index d13ebe3..068e9e9 100644 --- a/include/Debug.props +++ b/include/Debug.props @@ -40,13 +40,7 @@ - - - + \ No newline at end of file diff --git a/include/Release.props b/include/Release.props index 3f2469d..554bd58 100644 --- a/include/Release.props +++ b/include/Release.props @@ -42,13 +42,7 @@ - - - + \ No newline at end of file