microsoft / AuthJanitor

Manage the lifecycle of application tokens, keys, and secrets in Azure
https://www.authjanitor.com
MIT License
45 stars 17 forks source link

Add signature validation #85

Closed anthturner closed 4 years ago

anthturner commented 4 years ago

Adds a service and UI panel for signature validation for loaded modules.

This will be used to read digital signatures (authenticode) from loaded modules, in an effort to secure the AuthJanitor application itself by enforcing consistent certificate issuers, signed modules, etc.

Right now, no modules are signed, so this is here for future use, or if we opt to xplat-sign modules.