summaryrefslogtreecommitdiffstats
path: root/binarysign/README
diff options
context:
space:
mode:
Diffstat (limited to 'binarysign/README')
-rw-r--r--binarysign/README35
1 files changed, 35 insertions, 0 deletions
diff --git a/binarysign/README b/binarysign/README
new file mode 100644
index 000000000..3c9ef95cc
--- /dev/null
+++ b/binarysign/README
@@ -0,0 +1,35 @@
+== How to create a test certificate ==
+
+Install the .net SDK (for makecert and signtool)
+In theory, it should also work with openssl >= 0.9.9, but I have 0.9.8 everywhere and 1.0.0beta didn't compile.
+
+On an SDK prompt, type
+
+makecert -r -pe -ss TestCertStoreName -n "CN=SDK Test Certificate" -sv testcert.pvk testcert.cer
+
+
+PASSPHRASE => The checked in testcert.pvk has the passphrase "test"
+
+== How to sign a binary ==
+
+These are the steps I took to create a test signature. You need test certificate (.cer from above), test private key (.pvk from above) and the binary to sign.
+
+signtool signwizard
+
+* Choose the .exe to sign
+* Next
+* Choose Custom
+* Next
+* Choose "Select From File", select testcert.cer
+* Next
+* Browse..., select testcert.pvk
+* Next
+* Enter passphrase
+* Choose hash algorithm. Tested with sha1.
+* Next
+* Next
+* Enter something for description and web location
+* Next
+* Next
+* Finish
+