Re: I hate CodeSigning
Hi Jeff,
> Lee mentioned an SDK that satisfies the code signing ability's
> requirements on Windows 7.
IMO, it depends on the specific patch level of the Windows 7 machine.
Unfortunately, Microsoft changed something code-signing wise in one of the
2015 patches.
See attached screenshots. This is a Windows 7 SP1 machine and dual
SHA-1/SHA-2 code-signing always fails. Tested with signtool.exe versions
6.1.7000, 6.1.7600, 6.2.9200, 6.3.9600 and 10.0.20140. SHA-1 in the dual
code-signing process always succeeds, but SHA-2 fails. But it's not caused
by the SHA-2 signature per-se. SHA-2 only signing even works with 6.1.7000
(according to Microsoft, it was version 6.1.7600 that introduced SHA-2).
Friedrich
Reply With Quote