From 47f4d8cefe714b4ea6684bae86f8fc32c28b3d78 Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Sun, 1 Dec 2019 17:26:43 +0100 Subject: [PATCH] Update sign.bat to use new IDRIX code signing certificates --- ...igiCert_High_Assurance_Code_Signing_CA.cer | Bin 0 -> 1734 bytes src/GlobalSign_SHA256_EV_CodeSigning_CA.cer | Bin 1155 -> 1195 bytes src/Thawt_CodeSigning_CA.crt | 27 ------------------ src/sign.bat | 4 +-- 4 files changed, 2 insertions(+), 29 deletions(-) create mode 100644 src/DigiCert_High_Assurance_Code_Signing_CA.cer delete mode 100644 src/Thawt_CodeSigning_CA.crt diff --git a/src/DigiCert_High_Assurance_Code_Signing_CA.cer b/src/DigiCert_High_Assurance_Code_Signing_CA.cer new file mode 100644 index 0000000000000000000000000000000000000000..cddf4d0758a4136610c858f6d996f4c5722be068 GIT binary patch literal 1734 zcmbtUdrVVT7(e&kwgQ6G0u^xTO;I+iwC4iiMi@eh6BU(!bUqffyDjC8+Lqoj1fNvw za8pralWADU=#tqvj53|CIT6JG8%CJu=5$lX5L`5x=$M;f-{BSAvOmmjavtCJ{l4G% zoyYyKOLhjkq~02arf6DDpS{@i?%Z5|{kB@k`t|cy-~gHLRCk*D_W+8LN)fhjqp`1y z$(G21=%D{o?F>Df%1&B^Lg@WgQe9EW2#j*G$YEgcsS6AvaHGO_r7)d20F znyCL$qq7-JY?ffQ3RW{nisrD3QaybtloT;8DiDF+k9JWMI`>D!uaz&J-5BiI7_%a| zcAL$9x+^|EKcT?m4X>!&vV4C;e(M7Bx|EsTTl2nLbE>-G)0fKyZNlW9!X=9HITGEO zfJoPtV!Sh&UDQliP-teGKzT9^5V$t3up)0%YMjd9R zdfM)93R@^h#g}~lRLOU#YIcN$r*jWF)K^M%2NL=Is;g|fuX<5K?~}JSb<1lN`42lU z-%u1^`dPoUt(RJsYg*PYb8%+uzUhVqs@9U0_*zA)tnF_ zCk(@BN~y_pI_(Ks?LQxvRunDKyj_fTnCv!DaM~P209^(7#*u6qEd4|mm5EZ26%`>C z6(A9rV6>qe=$$AR3E*Lo4!jPq1@H@qM+TS^91ln@&O;*W3+JQc6fWwN6FcK96p9#GMR0_an20H_oi6){u1w0Ojo6ss~R`9Z@ za6ml|JqvjPM2N=0xdFWi7V!?|6OCjo!bsL4YmmJ;UV0?!#i(e77=P`rT@ z5%C$IcKEj?HDsiO%+iwrqD#^64ks=tC#oh%O5VXGr8v1JsV32#Fih#N#6BON<=+f( z&&x1@2pS_%N`iN%F?T|I@{S!^9Pv%1=6;i@-MAf3BH;*0C{}I^KA6-fFnwRoroO9+ z4ELe$@kVvy)5Ql$G87*Q&AGF7<*B-R&1>t=9iM0XNh#cPKaTqTde!E2$vKg++SF{X zcSp~3yId*$HC_s@HK9^QQ|r>Xw7qOX2;b-#15EAGRB zjQy$Qw=3G#y%)%RaQ?@RvAD{qZ0gFJ^>%F~^=&LFPJ3i?bIp2ntm;x9btJWI>lZC$ z?Y}5*bw9e9bi?;_b&*cDA^Q#K=ey)h(*p8Nf7H9WtG%%E=ns3UHXKi{P*;EDDLZ)W zKx2CQ?!8P?-HP$4fw40}ZngGn^&LvjvTSqp$1PXmEdJu$!)rW8>U*ZstL?v`;?}?B YEmXyy2rg|d-+3)Cv0!V<=(6s=0SV0~zW@LL literal 0 HcmV?d00001 diff --git a/src/GlobalSign_SHA256_EV_CodeSigning_CA.cer b/src/GlobalSign_SHA256_EV_CodeSigning_CA.cer index 6cdc7000cbc4eeef3c0854a36bfa15c24b4dc806..3b9017365a96c5837bd6455ab179009078f93155 100644 GIT binary patch delta 768 zcmV+b1ONPk39AVmFoFc9FoFY*paTK{0s;<58)^rsLQEd2{`1Z850M&T6*e$7F*PtS zFfcGMS{Ds6G%z+XH87EpbpbPz2LT~}*|)kSt(5ayzCi{YQ_2hwj8Q>ZGkIk6SDob5 zCB*Ddgjkqzc|hVXc+`^WCJvsim3;fe{c%Lyj9<4Si(b3*{7cItJ;Qbb_0fz)ym56M zi_(dSzT;6n#>k4YF*OHnx%Ikg4fGJ7uGL~mD0}Qzx~npLv3=5_Rt7fiuQ*u6e6{8ezuQVAKT|{ z^gqc9VG-7Fcby|D+U1t1qTBI1_&z#0R;sI0|}Ew0v{CIELbcmZ#6BSd6lS0UBqoZ zQ@^>BP6Hy7`T{_c!U8BgV{dIQa&K>REpjt1V{&XTVg>_M9Uuf-Fj+7Q1_>($0R#b{ zG64cG2L=UafeZlyFhK?hD+U1s0iZGgUz3XhH-8NV2`Yw2hW8Bt0Sg5H1A+ko0Cow) z%rDvR9!shCSMxwQA<9fV9iAyGAk-^F(umF)4F%7GfxGKzyfKX`#K%O;U|^IS&!OQ0 zBo3`xzAVBg9%r}cC?7IW<2mz~-?*PHiz>8x3In{oHUy8!(40@B0w3X!r3?Vu_h2TM|+wAx>TY?lmB_Y8jQuCwV&U3=W9^$N0ezxB)HlI=nS1t2JA{P yAbw9>hJ-IQqs^SbgjXLQt-#`>vF|BsAr+UV)c)-QH?aKmjVip{goESW!{=YIpg}1B delta 728 zcmV;}0w?{e34;k5FoFbsFoFYTpaTK{0s;#J000000WpcjP2rIpVihqkI509XFfcGM zFj^N4F*z_eFfuWblyw0zlL`SLf19=+e-~A(HCC#mv;K}0y01^VBZehUk=Vr%sfowF07`nc84;hrStTmcBV4M+SEb-ML&}dWQ{%exe|B02#T?)wh{rzNZ#q>3gsq?&I#G#->WMe7CqkXF+xh{ zoe1=aQ}4-gr~0FY6RF|UAI8@L0|5X5qk;iGFoFR(Fb)O-RUHoj0sjO90|EgClV<`S zCknhIEG+k&<)4*&t-ICm7*RQeZZJm%163U$1VAu8FgykXRUIGzlVJllll%fG4{l|2 zFLG~hbS-i-E@N_Rle+>z6cYvmRUIV+3@{1?2rC8w1qBBK1CyEpB7Y4A2`Yw2hW8Bt z0Sg5H1A+ko0IH!8m;baQ=<@^Y(~j>_pUYm&_=vY%2h&21% zN#P>u4~nrONGTcIF8L#9Sb-E(EhM=qXn0esa{bHkic_H4$PjOdI3sSmnelUw+ws4E zqppof6}*jz{aGFU6MwE$!={(b0Bb!#NRSl;NWeP%8*s^H$ zljR=bg8{1xhO*D4N;jmk+-%o^F^xZv=CLXTaEbgN9iJ-q%oW{}wO0-6Km!8M1W$zR K@N$3$l@b&^n>^M4 diff --git a/src/Thawt_CodeSigning_CA.crt b/src/Thawt_CodeSigning_CA.crt deleted file mode 100644 index e46f7b4..0000000 --- a/src/Thawt_CodeSigning_CA.crt +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEnDCCA4SgAwIBAgIQR5dNeHOlvKsNL7NwGS/OXjANBgkqhkiG9w0BAQUFADCB -qTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf -Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw -MDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNV -BAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwHhcNMTAwMjA4MDAwMDAwWhcNMjAw -MjA3MjM1OTU5WjBKMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMu -MSQwIgYDVQQDExtUaGF3dGUgQ29kZSBTaWduaW5nIENBIC0gRzIwggEiMA0GCSqG -SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3i891W58l2n45sJPbONOpI9CC+ukkflwL -joP45npZ5qPFmKeZ0kT/AKalOQSK2imI6tui8xyZFSbCsfT84QxHqQkRBgogkrnH -oASMXJQZq1slLB1ifnANzmFs3SuCyc5dSF/3wr68QSMeTyld10+89MUq/GPmfCZO -mad5QZ4QSnp5ycaG94aV0ibOPBgq1nzOr82tu/eCLHAmN0XlD0cixgEovS6DXGqk -R8Hn0NhrgUY/IRf1B8VDWqZnLLh7YBG1g+71dApycUQ9WP7oGqs4w1nbf244fXbH -cmmYNpZX02Yc0lSRBC5UGbDcPbUiXobVKn4g313merFl/sUCTjEtAgMBAAGjggEc -MIIBGDASBgNVHRMBAf8ECDAGAQH/AgEAMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6 -Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQQ0EuY3JsMA4GA1UdDwEB/wQEAwIBBjAy -BggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5j -b20wHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMDMCkGA1UdEQQiMCCkHjAc -MRowGAYDVQQDExFWZXJpU2lnbk1QS0ktMi0xMDAdBgNVHQ4EFgQU1A1lP3q9NMb+ -R+dMDcC98t4Vq3EwHwYDVR0jBBgwFoAUe1tFz6/Oy3r9MZIaarbzRutXSFAwDQYJ -KoZIhvcNAQEFBQADggEBAFb+U1zhx568p+1+U21qFEtRjEBegF+qpOgv7zjIBMnK -Ps/fOlhOsNS2Y8UpV/oCBZpFTWjbKhvUND2fAMNay5VJpW7hsMX8QU1BSm/Td8jX -OI3kGd4Y8x8VZYNtRQxT+QqaLqVdv28ygRiSGWpVAK1jHFIGflXZKWiuSnwYmnmI -ayMj2Cc4KimHdsr7x7ZiIx/telZM3ZwyW/U9DEYYlTsqI2iDZEHZAG0PGSQVaHK9 -xXFnbqxM25DrUaUaYgfQvmoARzxyL+xPYT5zhc5aCre6wBwTdeMiOSjdbR0JRp1P -uuhAgZHGpM6UchsBzypuFWeVia59t7fN+Qo9dbZrPCU= ------END CERTIFICATE----- \ No newline at end of file diff --git a/src/sign.bat b/src/sign.bat index aa2bc2f..9478a3e 100644 --- a/src/sign.bat +++ b/src/sign.bat @@ -1,9 +1,9 @@ PATH=%PATH%;%WSDK81%\bin\x86 rem sign using SHA-1 -signtool sign /v /a /n "IDRIX" /i Thawte /ac Thawt_CodeSigning_CA.crt /fd sha1 /t http://timestamp.verisign.com/scripts/timestamp.dll Release\VeraStatus.exe x64\Release\VeraStatus.exe +signtool sign /v /sha1 1FE67EF0455A9CC11433542FEC0A86DDD644B405 /ac DigiCert_High_Assurance_Code_Signing_CA.cer /fd sha1 /t http://timestamp.verisign.com/scripts/timestamp.dll Release\VeraStatus.exe x64\Release\VeraStatus.exe rem sign using SHA-256 -signtool sign /v /a /n "IDRIX SARL" /i GlobalSign /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 Release\VeraStatus.exe x64\Release\VeraStatus.exe +signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 Release\VeraStatus.exe x64\Release\VeraStatus.exe pause