Questions tagged [signtool]

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files. For information about why signing files is important, see Introduction to Code Signing. The tool is installed in the \Bin folder of the Microsoft Windows Software Development Kit (SDK) installation path.

SignTool is available as part of the Windows SDK, which you can download.

342 questions
3
votes
2 answers

Is there a way to sign a binary file using an expired certificate?

I'm using signtool to sign my exe and dll files. For testing purposes, I want to find the way to do it using an expired certificate. Is it possible? If not possible with signtool I can also use another tool. Btw. I don't want to change my system…
mrlukz
  • 101
  • 1
  • 8
3
votes
0 answers

SignTool internal error with cert by SimplySign App from Certum(0x80090020)

I get a Ev Code sign in Cloud from Certum. And with the SimplySign app, I do not need to get the USB disk. But when sign with the cert, An error occurs: SignTool.exe sign /ac "Certum Trusted Network CA.crt" /sha1…
李小培
  • 31
  • 1
3
votes
2 answers

SignTool error: SignerSign() failed." (-2147024885/0x8007000b) when signing msi file

We recently purchased an EV Code Signing Certificate. I followed instructions and I can successfully sign our built applications (exe files), our libraries (dll). However, I can't sign our setup packages (MSI files), I always get this…
codefire
  • 31
  • 3
3
votes
0 answers

Teamcity Signtool via Msbuild Runner throws error on timestamp

Signtool is able to sign all passed assemblies just fine, but when it tries to timestamp them it fails with error code 255. This also results in an error in the event viewer: Faulting application name: signtool.exe, version: 10.0.10586.212, time…
tphuoc
  • 113
  • 1
  • 10
3
votes
2 answers

Error 0x80080209 when signing appx file for Windows UWP

I have build a Windows 10 UWP cordova application, and are now trying to sign it. I already have a certificate that is used elsewhere (to sign .net assemblies) so I thought I would use the same one for this application signing. When I use the…
peterc
  • 6,921
  • 9
  • 65
  • 131
3
votes
2 answers

Signing executables with EV-Certificate with Install4J

our company ordered an EV-Certificate from GlobalSign. Before we had a normal code signing certificate as a p12 file which we could use in Install4J. Now, with the new certificate we have no cert-files but a usb-token. Is there a built-in way to use…
dominic.e
  • 286
  • 3
  • 17
3
votes
0 answers

Signing installer for windows app using electron builder

I am using electron-builder for creating installer for my desktop app in windows by command build -w it cerates folder win-unpacked(for build) and win(for installer) here is my package.json { "name": "CoDesktopElectron", "version":…
3
votes
1 answer

Executable is not signed after installed via MSI

We have an application that requires the user to be an admin to run. So, in the app.manifest we have set up We have a key to sign our assemblies with, which I have been…
Seattle Leonard
  • 6,548
  • 3
  • 27
  • 37
3
votes
4 answers

How do you specify a complex publisher name in Powershell?

I'm trying to use the Microsoft Desktop App Converter (AKA Desktop Bridge) and our publisher name has a comma, space and period in it. eg. CN="Acme, Inc." This does not work: DesktopAppConverter.exe -Installer .\Installer.msi -Destination AppxFolder…
3
votes
2 answers

signtool selects wrong (old) certificate for code-signing

I have a problem which I absolutely do not understand. A few days ago I issued a new codesigning certificate from our vendor (GlobalSign). After logging in to the build server with the user that does the build / codesigning, I started certmgr,…
Vertigo
  • 634
  • 1
  • 9
  • 24
3
votes
3 answers

SignTool Verify equivalent for .application and .manifest files?

I am using using signtool.exe v6.2.9200.20527 for /tr and /td switch support. In the following examples 0961...35d2 is the SHA1 thumbprint of a SHA256 Code Signing certificate in the current user's Personal > Certificates store. Example 1: Code…
AlwaysLearning
  • 7,915
  • 5
  • 27
  • 35
3
votes
2 answers

Do I Need To Use My Certificate Authorities Timestamp Server?

I'm trying to code sign my software and I am having issues because of the timestamp server. The certificate is from StartSSL. I'm getting an error which is shown below: $ signtool sign /tr "http://www.startssl.com/timestamp" /f certfile.p12 /p…
SameOldNick
  • 2,397
  • 24
  • 33
3
votes
1 answer

Code signing with osslsigncode - Publisher Unknown

I encountered a bit peculiar behavior when trying to automate compilation and signing of particular NSIS-based binary. Namely, makensis is run under wine to compile the executable, and afterwards the osslsigncode is used to sign the binary. …
Less
  • 3,047
  • 3
  • 35
  • 46
3
votes
1 answer

Unknown Publisher warning using Symantec EV Certificate

My company purchased an EV Certificate from Symantec to use for a software product we produce. Specifically it is called: Symantec Class 3 Extended Validation Code Signing CA – G2. We apply the Certificate to the execuatables and DLLs using…
3
votes
1 answer

Can Verisign signtool sign jar files in windows enviornment?

I used the following command: C:\Verisign>signtool sign /v /ac "MSCV-VSClass3.cer"/s MY /n "ABC Company LTD" /t http://timestamp.verisign.com/scripts/timstamp.dll TestRun.jar and I get the following result: SignTool Error: This file format cannot…
user1606275
  • 51
  • 2
  • 5