Skip to content

Add signing manifest and script to update it with production values#5397

Merged
TravisEz13 merged 3 commits intoPowerShell:masterfrom
TravisEz13:codesigning
Nov 10, 2017
Merged

Add signing manifest and script to update it with production values#5397
TravisEz13 merged 3 commits intoPowerShell:masterfrom
TravisEz13:codesigning

Conversation

@TravisEz13
Copy link
Copy Markdown
Member

No description provided.

@TravisEz13 TravisEz13 added the Compliance Related to compliance requirements label Nov 9, 2017
Copy link
Copy Markdown
Member

@daxian-dbw daxian-dbw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Some comments left.

@@ -0,0 +1,49 @@
<?xml version="1.0" encoding="utf-8" ?>
<SignConfigXML>
<!-- ****Begin**** Should be BothDual - Dual (Sha256 and Sha1) AuthenticodeDual) and StrongName ******** -->
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"StorngName" is gone



<!--
<file src="__INPATHROOT__\Install-PowerShellRemoting.ps1" signType="AuthenticodeDual" dest="__OUTPATHROOT__\Install-PowerShellRemoting.ps1" />
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This script is not in the parent folder of publish. File an issue.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Another ps1 file is coming for etw provider.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#5398 filed

<!--
<file src="__INPATHROOT__\Install-PowerShellRemoting.ps1" signType="AuthenticodeDual" dest="__OUTPATHROOT__\Install-PowerShellRemoting.ps1" />
-->
<!-- ****Begin**** Authenticode - Authenticode SHA256 ************* -->
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add a comment why those files cannot be dual signed (they are scripts)

$signingXml = [xml](Get-Content $signingXmlPath)

# Get any variables to updating 'signType' in the XML
# Define a varabile named `<signTypeInXml>SignType' in VSTS to updating that signing type
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add a concrete example.

@TravisEz13 TravisEz13 merged commit 1a5134f into PowerShell:master Nov 10, 2017
@TravisEz13 TravisEz13 deleted the codesigning branch November 10, 2017 01:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Compliance Related to compliance requirements

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants