summaryrefslogtreecommitdiffstats
path: root/binarysign/README
blob: 3c9ef95cc1278d8632f938807674115f9a21f533 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
== How to create a test certificate ==

Install the .net SDK (for makecert and signtool)
In theory, it should also work with openssl >= 0.9.9, but I have 0.9.8 everywhere and 1.0.0beta didn't compile.

On an SDK prompt, type

makecert -r -pe -ss TestCertStoreName -n "CN=SDK Test Certificate" -sv testcert.pvk testcert.cer


PASSPHRASE => The checked in testcert.pvk has the passphrase "test"

== How to sign a binary ==

These are the steps I took to create a test signature. You need test certificate (.cer from above), test private key (.pvk from above) and the binary to sign.

signtool signwizard

* Choose the .exe to sign
* Next
* Choose Custom
* Next
* Choose "Select From File", select testcert.cer
* Next
* Browse..., select testcert.pvk
* Next
* Enter passphrase
* Choose hash algorithm. Tested with sha1.
* Next
* Next
* Enter something for description and web location
* Next
* Next
* Finish