269 Commits

Author SHA1 Message Date
Per Allansson
5677522790 verify: print cert serialno as well 2015-01-14 14:49:14 +01:00
Per Allansson
0c15ccc4db speed up checksum calculation (patch from Veselin Georgiev) 2015-01-06 09:08:26 +01:00
Per Allansson
a912601140 version 1.7.1 2014-07-11 06:55:08 +02:00
Mikkel Krautz
6b9774f6bc Remove reference to exsig in msi_verify_pkcs7 to fix the -DGSF_CAN_READ_METADATA build.
This was broken due to the refactoring that happened during
the introduction of nested signature support.
2014-07-11 06:46:58 +02:00
Mikkel Krautz
180a775702 Add sanity check for the potentially 'dangerous' combination of -add-msi-dse and -nest.
We don't want osslsigncode to emit bad signatures when we can avoid it.
2014-07-10 23:47:13 +02:00
Mikkel Krautz
d0c5b350e9 Remove NO_MSI_DIGITALSIGNATUREEX ifndefs. 2014-07-10 23:09:41 +02:00
Mikkel Krautz
ec3d58ad4b Add the MSI-specific flag '-add-msi-se' to the 'sign' command for explicitly adding a MsiDigitalSignatureEx section. 2014-07-10 23:01:48 +02:00
Per Allansson
9fa7e17770 version 1.7 2014-07-10 07:42:02 +02:00
Per Allansson
71838d3242 Fix a couple of GCC warnings 2014-07-10 07:33:53 +02:00
Mikkel Krautz
0b0be2f97b Disable the addition of MsiDigitalSignatureEx when signing MSI files. It does not work well with nested signatures. 2014-07-09 20:39:28 +02:00
Mikkel Krautz
fe7dd0076e Fix leaf hash corruption when verifying nested signatures. 2014-07-06 12:15:18 +02:00
Mikkel Krautz
a4544a1f74 Add support for nested signing and verifying nested signatures for MSI files. 2014-07-06 12:15:01 +02:00
Mikkel Krautz
2fee516164 Add support for nested signing for PE files. 2014-07-06 11:54:39 +02:00
Per Allansson
03848a9c60 removed unused variable 2014-06-03 09:13:06 +02:00
Per Allansson
f4e78ea7f7 Add OpenSSL exception in license 2014-06-03 09:09:47 +02:00
Mikkel Krautz
598bab9632 Add support for verifying nested signatures in PE files. 2014-06-03 09:00:54 +02:00
Per Allansson
6fa669a97e fix compilation problem with OpenSSL < 1.0.0 2014-01-24 09:13:34 +01:00
Per Allansson
4d458d2dd0 version 1.6 2014-01-21 15:31:32 +01:00
Per Allansson
82e01036b0 add support for '-askpass' and '-readpass <file>' 2014-01-21 15:28:42 +01:00
Per Allansson
0933f3cf47 updated changelog 2014-01-21 14:00:30 +01:00
Per Allansson
f6bc75bdc6 support running osslsigncode on Windows 2014-01-21 13:58:44 +01:00
Per Allansson
d2ebdf5eef fix compilation without curl 2014-01-21 13:57:59 +01:00
Per Allansson
010899a102 add 'compile' to .gitignore 2014-01-21 13:57:36 +01:00
Per Allansson
c1a3f05279 updated supported features 2013-07-04 21:21:36 +02:00
Per Allansson
a442aa32d5 update ChangeLog 2013-07-04 21:17:17 +02:00
Per Allansson
5abe856e77 fix compilation warnings 2013-07-04 21:12:50 +02:00
Mikkel Krautz
b96f440b03 PE, MSI: implement -require-leaf-hash for CMD_VERIFY. 2013-07-04 21:02:00 +02:00
Mikkel Krautz
30ee6536c4 MSI: add support for extracting signatures. 2013-07-04 21:01:28 +02:00
Mikkel Krautz
bb65ac4d42 MSI: add support for verifying the signatures of MSI files. 2013-07-04 21:00:23 +02:00
Mikkel Krautz
9904aea27f MSI: add support for remove-signature. 2013-07-04 20:55:31 +02:00
Per Allansson
31facc400d add support for adding additional/cross certificates through -ac option 2013-06-15 09:06:51 +02:00
Mikkel Krautz
a3bc0a4576 MSI: Add support for MsiDigitalSignatureEx signature 2013-04-29 07:46:39 +02:00
Mikkel Krautz
5e811c5825 output hierarchical MSIs correctly 2013-04-28 22:21:54 +02:00
Per Allansson
11cc989cf6 ... and use correct index 2013-04-11 19:43:30 +02:00
Per Allansson
190d3e68dd added support for giving multiple timestamp servers as arguments - first one that succeeds will be used 2013-04-11 19:12:55 +02:00
Per Allansson
c6c234948c valgrind:ed - although everything libgsf-related was ignored... 2013-03-13 20:31:10 +01:00
Per Allansson
f4691ca996 Added support for page hashing (-ph option) 2013-03-13 19:01:58 +01:00
Per Allansson
4fd51c0d7d fixed page hash verification 2013-03-13 17:43:06 +01:00
Per Allansson
4944e9cf46 removed old obsolete hack 2013-03-13 17:28:35 +01:00
Per Allansson
e8bd3c3b68 added support for sha384 and sha512 2013-03-13 17:24:54 +01:00
Per Allansson
9152c925c0 Page hash verification now works
Had it right from the start, but messed up the python script...
2013-03-12 20:43:54 +01:00
Per Allansson
0494a7ceb1 1.5.1... 2013-03-12 08:30:10 +01:00
Per Allansson
3bbf757ca4 bump 2013-03-12 07:37:39 +01:00
Per Allansson
3e97269d4e working RFC3161 timestamping 2013-03-11 22:06:41 +01:00
Per Allansson
d4392c2167 - added support for reading certificates from PEM files
- fixed compiler warnings
- renamed option -spc to -certs
- no need for -pvk option since we can detect pvk files anyway
- updated docs to reflect changes
- added simple test script
- updated RFC3161 timestamping (but still does not result in valid signature)
2013-03-11 20:12:45 +01:00
Per Allansson
58750a5265 added preliminary support for RGC3161 timestamping 2013-03-10 21:51:56 +01:00
Per Allansson
9b604211e7 Added small python script which can be used to calculate & experiment
with Authenticode page hashes. Calculating everything but the first
page hash seems to be working and is straightforward. If anyone knows
how this is done, p-p-p-please let me know.
2013-03-10 17:32:09 +01:00
Per Allansson
e0cf24f1d5 warn if digest doesn't match 2013-03-10 17:30:01 +01:00
Per Allansson
4e11a04ed3 need to recreate BIO mem buf object each time we want to use it 2013-03-08 18:08:51 +01:00
Per Allansson
4fccd43521 verify now also extracts the page hash 2013-03-08 18:08:14 +01:00