Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
10
votes
1 answer

SignTool internal error when trying to repackage an APPX package?

I'm analyzing existing Windows Store applications and modifying them to make sure my company's obfuscator works with them. I've ran into a bit of a problem doing that though. I can grab an APPX package from the store easily enough(requires Fiddler…
Earlz
  • 62,085
  • 98
  • 303
  • 499
9
votes
2 answers

Visual studio signing failed (signtool.exe error)

After accepting a minor Windows update this afternoon, I found that I could no longer make signed builds of my Visual Studio application. Digging in to the problem, I came upon the signtool.exe program which is located in an obscure directory…
Flarosa
  • 1,287
  • 1
  • 13
  • 27
9
votes
5 answers

Why does signtool.exe only find certificate when run as admin?

I'm setting up a new development laptop, and have installed a self-issued code signing certificate. I can see it in certmgr under my Current Users's Personal Certificates. When I try to build from the Developer Command Prompt For Visual Studio 2017…
9
votes
4 answers

How do I use signtool in post build event for Visual Studio 2013 without hard coding path?

I've created a post build event to do code signing of the application after a successful build with the following post build script. copy $(TargetPath) $(TargetDir)SignedApp.exe signtool sign /t http://timestamp.verisign.com/scripts/timestamp.dll /a…
JonN
  • 2,498
  • 5
  • 33
  • 49
9
votes
4 answers

Verify whether an executable is signed or not (signtool used to sign that exe)

In my application I need to verify whether it's signed or not. If it's signed continue the execution and exit the application if not. The signtool will be used to sign the application. Is there any C# code to do that?
Anas EL HAJJAJI
  • 1,048
  • 2
  • 10
  • 22
9
votes
2 answers

How can I specify an E-Mail address when signing a binary file?

I'm using signtool to apply a digital signature to various .exe/.dll files. However, viewing the signed files in Windows Explorer shows that no E-Mail address is set, much like in this screenshot (I'm by no means affiliated with "Paramount Software…
Frerich Raabe
  • 90,689
  • 19
  • 115
  • 207
8
votes
0 answers

Automate Extended Validation (EV) code signing with mage.exe

I try to sign a WPF ClickOnce application with EV certificate stored on a HSM from Gemalto. I have a Continuous Deployment (CD) configured and I want to sign automatically without user interaction, like with PFX files before. With the article…
Flow
  • 81
  • 2
8
votes
1 answer

Code Signing with a Certum certificate

I want to sign a static .exe build of one of my Open Source programs so that it will be executable in a "normal" manner to a "normal" Windows user. I bought an Open Source Code Signing Certificate from certum.eu to be able to do this. After some…
Tobias Leupold
  • 1,512
  • 1
  • 16
  • 41
8
votes
3 answers

SignTool Error: The specified algorithm cannot be used or is invalid

I am trying to use Visual Studio 2012 Express to sign my appx file for a windows store app, but get the following error: SignTool Error: The specified algorithm cannot be used or is invalid I am running the process through the STORE->Create App…
WildCrustacean
  • 5,896
  • 2
  • 31
  • 42
8
votes
1 answer

How to perform code signing using osslsigncode

Can you help me to figure out how to sign my software with a certificate. You know that signtool can work only on windows machines, but i need to sign files on linux server. Now the system working like that, file builds on linux server then it moves…
user1991123
  • 121
  • 2
  • 7
8
votes
1 answer

How to sign my VB.NET application?

I'd like to avoid this scary messages when users install my application: I understand I have to buy a certification or something like that. Can you tell me where should I buy it and what should I do with that after? I'd like to sign my exe…
Tamir Gefen
  • 1,128
  • 2
  • 18
  • 35
8
votes
1 answer

How to sign an MSI?

My company wants to prevent the UAC popup that appears when customers install our product. We purchased a certificate from VeriSign (VeriSign Class 3 Code Signing 2010 CA) and I got a MyCompany.cer file. I installed the cert by double-clicking it…
Sisiutl
  • 4,915
  • 8
  • 41
  • 54
7
votes
3 answers

Signtool SignerSign() Error (-1073700864/0xc000a000)

where can i find the meaning of this error for the program SignTool.exe? "Error: SignerSign() failed." (-1073700864/0xc000a000) I have been getting this error randomly for a few days when calling the command signtool.exe sign /debug /a /tr…
Octo
  • 543
  • 1
  • 5
  • 16
7
votes
3 answers

Is http://timestamp.geotrust.com/tsa not longer available for SignTool?

We sign our executables on the build server. Suddenly the build server failed to build giving the error: SingTool Error: The sepcified timestamp server either could not be reached or returned an invalid response. After changing the timestamp…
Mat
  • 1,960
  • 5
  • 25
  • 38
7
votes
2 answers

How do I read the public key from a signed C# exe

I'm signing a dot net exe using signcode.exe with an spc/pvk combo The file needs to read its own Public Key at runtime in order to verify some data. I've gone down a number of different avenues. I've tried X509Certificate…
Fiacc
  • 1,324
  • 1
  • 15
  • 24
1 2
3
22 23