SharkCagey / SharkCage

1 stars 3 forks source link

Sign application using yubikey #57

Closed SailReal closed 6 years ago

SailReal commented 6 years ago

Using the inserted Yubikey, we are now able to sign our applications using the following command:

signtool sign /sha1 ADBE74BD39789DD111815DE59C60D715143E4620 SharkCage.msi

screen shot 2018-06-27 at 8 18 50 pm

screen shot 2018-06-27 at 8 29 30 pm

27

SailReal commented 6 years ago

Better use signtool sign /tr http://timestamp.digicert.com /td sha256 /fd sha256 /sha1 ADBE74BD39789DD111815DE59C60D715143E4620 SharkCage.msi to also assign a timestamp und use SHA256

DonatJR commented 6 years ago

We should also use the /d switch to have the UAC prompt display a proper name:

/d Desc | Specifies a description of the signed content.

https://stackoverflow.com/questions/4315840/the-uac-prompt-shows-a-temporary-random-program-name-for-msi-can-the-correct-na https://docs.microsoft.com/en-us/windows/desktop/seccrypto/signtool

SailReal commented 6 years ago

We should also use the /d

Nice, works 👍