Change: Switch to using SHA256 signature algorithm to sign the Dangerzone executables and installer.

This commit is contained in:
JKarasti 2024-09-26 16:15:03 +03:00 committed by Alex Pyrgiotis
parent 941131f7a9
commit b79113c1c5
No known key found for this signature in database
GPG key ID: B6C15EBA0357C9AA

View file

@ -2,12 +2,14 @@ REM delete old dist and build files
rmdir /s /q dist rmdir /s /q dist
rmdir /s /q build rmdir /s /q build
REM build the exe REM build the gui and cli exe
python .\setup-windows.py build python .\setup-windows.py build
REM code sign dangerzone.exe REM code sign dangerzone.exe
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha1 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone.exe signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone.exe
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha1 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone-cli.exe
REM code sign dangerzone-cli.exe
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ build\exe.win-amd64-3.12\dangerzone-cli.exe
REM build the wix file REM build the wix file
python install\windows\build-wxs.py > build\Dangerzone.wxs python install\windows\build-wxs.py > build\Dangerzone.wxs
@ -17,9 +19,9 @@ cd build
candle.exe Dangerzone.wxs candle.exe Dangerzone.wxs
light.exe -ext WixUIExtension Dangerzone.wixobj light.exe -ext WixUIExtension Dangerzone.wixobj
REM code sign dangerzone.msi REM code sign Dangerzone.msi
insignia.exe -im Dangerzone.msi insignia.exe -im Dangerzone.msi
signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha1 /t http://time.certum.pl/ Dangerzone.msi signtool.exe sign /v /d "Dangerzone" /a /n "Freedom of the Press Foundation" /fd sha256 /t http://time.certum.pl/ Dangerzone.msi
REM moving Dangerzone.msi to dist REM moving Dangerzone.msi to dist
cd .. cd ..