Sign our script

* Because why not, and some folks might have policies where this could help.
This commit is contained in:
Pete Batard
2021-05-26 17:32:36 +01:00
parent 99f6f246b8
commit 43adf47d5d
2 changed files with 156 additions and 0 deletions

View File

@@ -20,6 +20,8 @@ sign_file() {
fi
}
# Update the Authenticode signature
cmd.exe /c '"C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\signtool" sign /v /sha1 9ce9a71ccab3b38a74781b975f1c228222cf7d3b /fd SHA256 /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp Fido.ps1'
read -s -p "Enter pass phrase for `realpath $PRIVATE_KEY`: " PASSWORD
echo
# Confirm that the pass phrase is valid by trying to sign a dummy file