search

mtrojnar / osslsigncode

OpenSSL based Authenticode signing for PE/MSI/Java CAB files
Other
801 stars 131 forks source link

osslsigncode 2.5: Failed signing binaries > 2GB #185

Closed Rosch closed 2 years ago

Rosch commented 2 years ago

Using the supplied precompiled binaries for windows (tried the mingw and the vs-static version) it is not possible to sign.exe files which are >2GB. Maybe large file support of the used openssl is not enabled?

Failed to open file: \\server\Install\Installer_having_2400MB.exe
94190000:error:1E08010C:DECODER routines:OSSL_DECODER_from_bio:unsupported:crypto\encode_decode\decoder_lib.c:101:No supported data to decode.  Input type: DER, Input structure: type-specific
94190000:error:1E08010C:DECODER routines:OSSL_DECODER_from_bio:unsupported:crypto\encode_decode\decoder_lib.c:101:No supported data to decode.  Input type: DER, Input structure: PrivateKeyInfo
94190000:error:1E08010C:DECODER routines:OSSL_DECODER_from_bio:unsupported:crypto\encode_decode\decoder_lib.c:101:No supported data to decode. Input type: DER
94190000:error:068000A8:asn1 encoding routines:asn1_check_tlen:wrong tag:crypto\asn1\tasn_dec.c:1188:
94190000:error:0688010A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:crypto\asn1\tasn_dec.c:613:
94190000:error:068000A8:asn1 encoding routines:asn1_check_tlen:wrong tag:crypto\asn1\tasn_dec.c:1188:
94190000:error:0688010A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:crypto\asn1\tasn_dec.c:349:Type=RSAPrivateKey
94190000:error:068000A8:asn1 encoding routines:asn1_check_tlen:wrong tag:crypto\asn1\tasn_dec.c:1188:
94190000:error:0688010A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:crypto\asn1\tasn_dec.c:349:Type=PKCS8_PRIV_KEY_INFO
Failed
mtrojnar commented 2 years ago

Interesting. Just curious: which software has such a large installer? Does SignTool sign it correctly?

Rosch commented 2 years ago

Signtool can sign it - but very slow and not with every useraccount (this problem is not related to the filesize). osslsigncode is more reliable. :-)

to satisfy your curiosity: It is Workflow solution for the printing industry assuring correct print results and printable PDFs. (if you want to read more: https://www.onevision.com/)