signWithParams Throws 'No certificates were found that met all the given criteria'

[dapperdandev]

Summary signWithParams isn't working as expected. Running signtool directly from the command line works fine, i.e.., signtool.exe sign /s MY /n Publisher /fd sha256 /u "Code Signing" /tr http://tsa.starfieldtech.com .\setup.msi works

Repro Steps

• Make sure the certificate exists
• Add signWithParams property to config

...
signWithParams: '/s MY /n Publisher /fd sha256 /u "Code Signing" /tr http://tsa.starfieldtech.com',
...

[savely-krasovsky]

@dapperdandev did you find a solution?

[dapperdandev]

@L11R Nope. Just ended up dropping the signtool.exe binary into a vendor folder and running via child_process.exec. This was a while ago though and there are probably better workarounds.