dotnet / sign

Code Signing CLI tool supporting Authenticode, NuGet, VSIX, and ClickOnce
MIT License
439 stars 84 forks source link

Remove `--certificate-fingerprint-algorithm` option #722

Closed dtivel closed 1 week ago

dtivel commented 1 week ago

Resolve https://github.com/dotnet/sign/issues/721.

This change removes the --certificate-fingerprint-algorithm option and instead infers the fingerprint algorithm from the length of the fingerprint.

If an invalid value is provided (e.g.: not hexadecimal or an unsupported algorithm like SHA-1), the error is:

Invalid value for --certificate-fingerprint. The value must be a SHA-256, SHA-384, or SHA-512 certificate fingerprint (in hexadecimal).

CC @clairernovotny, @javierdlg, @kartheekp-ms