Uploaded image for project: 'Nuxeo Drive '
  1. Nuxeo Drive
  2. NXDRIVE-2935

[Windows] Specify the installer signing certificate timestamp algorithm

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Packaging / Build

      Description

      I saw that warning in logs when files are code-signed on Windows:

      SignTool Warning: No file timestamp algorithm specified. Please specify the timestamp algorithm with the /td flag. Using /td SHA256 is recommended and considered more secure than SHA1. Calling signtool with /td sha1 is equivalent to the previous behavior. In future releases, this parameter will be required. In order to select the hash algorithm used in the signing certificate's signature, use the /td certHash option.

      To prevent future problem, lets fix it right now by adding /td SHA256 to the command line right after that one.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: