From 4abd4720be343b7994745f4ac78067d1217e34ee Mon Sep 17 00:00:00 2001 From: JKarasti Date: Thu, 26 Sep 2024 16:20:23 +0300 Subject: [PATCH] Change: Verify the signatures of the signed files with `signtool verify` --- install/windows/build-app.bat | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/install/windows/build-app.bat b/install/windows/build-app.bat index 320a40f..1d2b770 100644 --- a/install/windows/build-app.bat +++ b/install/windows/build-app.bat @@ -8,9 +8,15 @@ python .\setup-windows.py build REM code sign dangerzone.exe signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone.exe +REM verify the signature of dangerzone.exe +signtool.exe verify /pa build\exe.win-amd64-3.12\dangerzone.exe + REM code sign dangerzone-cli.exe signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone-cli.exe +REM verify the signature of dangerzone-cli.exe +signtool.exe verify /pa build\exe.win-amd64-3.12\dangerzone-cli.exe + REM build the wix file python install\windows\build-wxs.py > build\Dangerzone.wxs @@ -23,6 +29,9 @@ REM code sign Dangerzone.msi insignia.exe -im Dangerzone.msi signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ Dangerzone.msi +REM verify the signature of Dangerzone.msi +signtool.exe verify /pa Dangerzone.msi + REM moving Dangerzone.msi to dist cd .. mkdir dist