Use SHA256 Digest for Code Signing on Windows

This commit is contained in:
Jonathan White 2020-01-07 16:34:40 -05:00 committed by Janek Bevendorff
parent e54f24e303
commit a362c08613

View File

@ -1291,8 +1291,8 @@ appsign() {
# osslsigncode does not succeed at signing MSI files at this time...
logInfo "Signing file '${f}' using Microsoft signtool..."
signtool sign -f "${key}" -p "${password}" -d "KeePassXC" \
-t "http://timestamp.comodoca.com/authenticode" "${f}"
signtool sign -f "${key}" -p "${password}" -d "KeePassXC" -td sha256 \
-fd sha256 -tr "http://timestamp.comodoca.com/authenticode" "${f}"
if [ 0 -ne $? ]; then
exitError "Signing failed!"