search

mtrojnar / osslsigncode

OpenSSL based Authenticode signing for PE/MSI/Java CAB files
Other
806 stars 131 forks source link

Tests not passed in new 2.3 version #140

Closed tim77 closed 2 years ago

tim77 commented 2 years ago

Previuos 2.2 version was passed all tests but new one 2.3 version failed:

./testall.sh
keys & certificates successfully generated
makecerts.sh finished
071. Sign a CAT file with Authenticode timestamping                                             failed
072. Sign a MSI file with Authenticode timestamping                                             failed
073. Sign a CAB file with Authenticode timestamping                                             failed
074. Sign a PE file with Authenticode timestamping                                              failed
081. Sign a CAT file with RFC 3161 timestamping                                                 failed
082. Sign a MSI file with RFC 3161 timestamping                                                 failed
083. Sign a CAB file with RFC 3161 timestamping                                                 failed
084. Sign a PE file with RFC 3161 timestamping                                                  failed
371. Add an authenticode timestamp to the CAT signed file                                       failed
372. Add an authenticode timestamp to the MSI signed file                                       failed
373. Add an authenticode timestamp to the CAB signed file                                       failed
374. Add an authenticode timestamp to the PE signed file                                        failed
381. Add a RFC 3161 timestamp to the CAT signed file                                            failed
382. Add a RFC 3161 timestamp to the MSI signed file                                            failed
383. Add a RFC 3161 timestamp to the CAB signed file                                            failed
384. Add a RFC 3161 timestamp to the PE signed file                                             failed
464. Verify changed PE file after signing with Authenticode timestamping                        failed
474. Verify changed PE file after signing with RFC 3161 timestamping                            failed
521. Verify a CAT file signed with Authenticode after the cert has been expired                 failed
522. Verify a MSI file signed with Authenticode after the cert has been expired                 failed
523. Verify a CAB file signed with Authenticode after the cert has been expired                 failed
524. Verify a PE file signed with Authenticode after the cert has been expired                  failed
531. Verify a CAT file signed with RFC3161 after the cert has been expired                      failed
532. Verify a MSI file signed with RFC3161 after the cert has been expired                      failed
533. Verify a CAB file signed with RFC3161 after the cert has been expired                      failed
534. Verify a PE file signed with RFC3161 after the cert has been expired                       failed
541. Verify a CAT file signed with the expired cert                                             failed
542. Verify a MSI file signed with the expired cert                                             failed
543. Verify a CAB file signed with the expired cert                                             failed
544. Verify a PE file signed with the expired cert                                              failed
551. Verify a CAT file signed with the revoked cert                                             failed
552. Verify a MSI file signed with the revoked cert                                             failed
553. Verify a CAB file signed with the revoked cert                                             failed
554. Verify a PE file signed with the revoked cert                                              failed
562. Verify a MSI file signed with the multiple signature                                       failed
563. Verify a CAB file signed with the multiple signature                                       failed
564. Verify a PE file signed with the multiple signature                                        failed
testall.sh finished
summary: success 115, skip 0, fail 37

Compiled 2.3 with disabled tests for now. Hope we can fix tests later. Please help due lack of time.

mtrojnar commented 2 years ago

There is good reason for the tests not to be accessible with simple "make check" and not distributed in the release tarballs: they are not mature enough to be used in an automated way. We are working on this.

BTW: Testing a timestamp client without network access to a timestamp server is probably a bad idea.

BTW: libgsf is no longer a dependency for osslsigncode.