2016. 2. 16. 18:59

Dual Code Signing

Dual Code Signing Instructions with SHA1 & SHA256 hashing Algorithm

Signing Tool:

Step 1:  Sign the Primary Signature with SHA1 Algorithm 

The following syntax signs the file using a certificate stored in your Personal certificate store

With TimeStamp:

signtool.exe sign /a /s MY /n "Common name" /fd sha1 /t http://timestamp.verisign.com/scripts/timstamp.dll /v "<file to be signed>"

 

Step 2:  Append the Secondary Signature with SHA256 Algorithm

Once the application file been signed with SHA1  algorithm  in Step 1 , follow the steps below to append the secondary signature with SHA256 algorithm to the same application file.

The following syntax signs the file using a certificate stored in your Personal certificate store

With TimeStamp:

signtool.exe sign /a /s MY /n "Common name" /as /fd sha256 /tr http://timestamp.geotrust.com/tsa /v "<file to be signed>"

Windows 7

https://technet.microsoft.com/ko-kr/library/security/2949927.aspx