Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
0
votes
0 answers

Errors when signing a Windows 10 Universal Platform application (with signtool)

I'm trying to sign an .appx file made converting a java application following this github guide I ended up with having the .appx package I tryied to sign it with the project's certificates and it gives error signtool.exe /a /f auto-generated.pfx /p…
DDS
  • 2,340
  • 16
  • 34
0
votes
2 answers

Change Package Identity Name,Publisher & ReSign appxbundle

What is the possibility of changing the applications Package Identity Name & Publisher for an existing appxbundle file and then re-sign the same with another certificate? We have a requirement where we will receive a pre-signed…
0
votes
1 answer

p7b certificate has been issued by DigiCertificate but unable to figure out the OID object identifier of the p7b certificate

I have tried this signtool.exe sign /p7 C:\CertificateName.p7 /p7ce Embedded /p7co "C:\bin\xx*.dll" but i feel like OID value is wrong hence the error is SignTool Error: No certificates were found that met all the given criteria. Can anyone help…
0
votes
1 answer

Remove URL from Signtool

BUMP: any thoughts or suggestions? Building my web application has been throwing the following errors: The command ""C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\signtool.exe" sign /a /t…
png-zpl
  • 1
  • 2
0
votes
1 answer

CryptVerifyMessageSignature returns original message with an additional header, why?

I have used signtool to produce a PKCS#7 bundle that contains: a message a digital signature the signer certificate. The command that builds this PKCS#7 file is the following: $signtool sign /f signer_certificate.pfx /p ∙∙∙ /fd sha512 /p7 . /p7ce…
Benoit
  • 76,634
  • 23
  • 210
  • 236
0
votes
1 answer

How to handle signing EXE file using SignTool returned error: 0x80096019?

I try to sign an EXE file using Sign Tool, once I did signing it's successful, but once I verify, it return this error. Anyone can help please. Thank you, really appreciate the help. Signing Certificate Chain: Issued to: CARoot Issued by:…
Cheries
  • 834
  • 1
  • 13
  • 32
0
votes
1 answer

signtool: options interpreted as files on AppVeyor

I’m having this super weird behaviour on an AppVeyor build (Visual Studio 2019): In a shell script (cmd.exe), when signing my app with signtool, all the options are interpreted as files (signtool can sign multiple files at once). The line…
Yanone
  • 165
  • 10
0
votes
1 answer

SignTool Error: WinVerifyTrust returned error: 0x80096019

After signing my Application using Test certificate (pfx) with signtool when I try to verify using signtool verify I am getting below error code SignTool Error: WinVerifyTrust returned error: 0x80096019 A certificate's basic constraint extension…
0
votes
1 answer

How to certificate an UWP .appxbundle?

I'm creating a UWP app. I'm packaging it in the VS, and I get the .appxbundle. When I install the app using the .appxbundle, I don't receive any issue (probably because I've trust with my own certificate). But when I pass to another person the…
Tupi
  • 218
  • 5
  • 13
0
votes
2 answers

SignTool Error: An unexpected internal error has occurred. error MSB3482

SignTool Error: An unexpected internal error has occurred. error MSB3482 3>C:\Program Files (x86)\Microsoft Visual Studio\2019\Professional\MSBuild\Current\Bin\Microsoft.Common.CurrentVersion.targets(3975,5): error MSB3482: An error occurred while…
0
votes
0 answers

singtool fails due to missing private key

I have a DigiCert EV Code Signing token used to sign code. When I run signtool from a user shell, everything works fine. However, when I run signtool from a system service it fails. The last thing I tried was to "emulate" user shell, by…
alnet
  • 1,093
  • 1
  • 12
  • 24
0
votes
1 answer

Signing executables fails inside Docker container

I am trying to sign .exe and .dll files inside Gitlab Pipeline with docker-windows setup, using docker image: mcr.microsoft.com/dotnet/framework/sdk:4.8-windowsservercore-ltsc2019 I try to call these commands: > sn.exe -R myfile.exe myKey.snk >…
Šimon Kocúrek
  • 1,591
  • 1
  • 12
  • 22
0
votes
0 answers

signtool.exe fails after Windows 10 update and BSOD

This is a real shot in the dark, but just wondering if anyone else has run into this problem. After Windows 10 update to 10.0.18363.693, my system got a BSOD. Now all of the sudden signtool.exe terminates with no error message but ERRORLEVEL…
Neil Weicher
  • 2,370
  • 6
  • 34
  • 56
0
votes
0 answers

How to get the Private Key of self-signed Certificate

I'm trying to sign my Appxbundle with a self signed Certificate via signTool from a secondary machine(VM), which gets me this error. It works from the machine where I created the self signed Certificate, only on other machine it gets me this error.…
0
votes
1 answer

How to create a .vbs signature without signtool.exe?

Quoting a jsign bug report related How to validate authenticode for Javascript in C#. I've played a bit with VBScript and JScript files, it looks like the hashing method is different from the PowerShell scripts. For PowerShell the content is…
tresf
  • 7,103
  • 6
  • 40
  • 101