I'm trying to use CODESIGN_SHA = "12" for hybrid SHA-1/SHA-2 signing. I'm
using signtool.exe 6.3.9600.17298 from windows 8.1 SDK.

I tested using the command line, and it works fine for both algorithms, but
for SHA1 timestamping I must use server
http://timestamp.comodoca.com/authenticode, and for SHA2, server
http://timestamp.comodoca.com/rfc3161

In SB8 I can only configure one timestamp URL, so I can only successfully
sign code with SHA1 or SHA2, not both.

Is there a way to specify both timestamp urls in SB8? Or is my only option
to disable rfc3161 using CODESIGN_TSTYPE?

Carlos Gutierrez