nhyatt/osslsigncode
1
0
Fork 0
mirror of https://github.com/mtrojnar/osslsigncode.git synced 2025-04-04 08:50:12 -05:00
Code Issues Projects Releases Wiki Activity

Not only include Code Signing certificates

Browse Source
This commit is contained in:
Michał Trojnara 2024-06-04 13:25:51 +02:00
parent 3c8c74a8c3
commit bad6e96e0f
2 changed files with 4401 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4392
code_signing_ca.pem
View File

File diff suppressed because it is too large Load Diff

14
get_code_signing_ca.py
View File

@ -1,6 +1,7 @@
#!/usr/bin/python3
# © 2024 Michal Trojnara
# This script downloads Microsoft code signing certificates
# Tor is required for this script to work
# Redirect the script output to a PEM file
from sys import stderr
@ -15,21 +16,24 @@ def download_cert(hash):
if attempt > 0:
sleep(10)
try:
resp = get('https://crt.sh/?d=' + hash)
creds = f'{attempt}{hash}:{attempt}{hash}'
resp = get(f'https://crt.sh/?d={hash}',
proxies=dict(https=f'socks5://{creds}@127.0.0.1:9050'))
resp.raise_for_status()
print('.', file=stderr, end='')
stderr.flush()
return resp.content.decode('utf-8')
except RequestException as e:
print(f'\n{e}', file=stderr)
print(f'\nAttempt {attempt}: {e}', file=stderr)
print('\nGiving up on', hash, file=stderr)
resp = get('https://ccadb-public.secure.force.com/microsoft/IncludedCACertificateReportForMSFTCSV')
resp.raise_for_status()
lines = resp.content.decode('utf-8').splitlines()
lines = resp.content.decode('utf-8').splitlines()[1:]
hashes = [row[4] for row in reader(lines)
if row[0] != 'Disabled' and 'Code Signing' in row[5].split(';')]
with ThreadPoolExecutor(max_workers=5) as executor:
if row[0] != 'Disabled'
or row[4] == 'F38406E540D7A9D90CB4A9479299640FFB6DF9E224ECC7A01C0D9558D8DAD77D']
with ThreadPoolExecutor(max_workers=20) as executor:
certs = executor.map(download_cert, hashes)
for cert in certs:
if cert is not None: