Electron.NET icon indicating copy to clipboard operation
Electron.NET copied to clipboard

Sign appx bundle is not working with EV certificate

Open delasource opened this issue 3 years ago • 0 comments

  • Version: ElectronNET.CLI Version: 13.5.1.0
  • Target: net5.0 (win-x64 / appx)
  • My OS: Windows 11
  • I have an EV certificate (on hardware token) by Digicert

Signing in the process of dotnet electronize build /target win (as 'nsis' target) is no problem. But when the build.win.target is defined as "appx" then the signing failes:

Exit code: 1. Command failed: C:\Users\user\AppData\Local\electron-builder\Cache\winCodeSign\winCodeSign-2.6.0\windows-10\x64\signtool.exe sign /tr http://timestamp.digicert.com /sha1 SOMEHASHHERE /s My /fd sha256 /td sha256 /d PROJECTNAME /du https://github.com/ElectronNET/Electron.NET#readme /debug C:\PROJECTPATH\bin\Desktop\PROJECT 7.0.3.appx
SignTool Error: Multiple signature support is not implemented for this filetype.
SignTool Error: An error occurred while attempting to sign: C:\PROJECTPATH\bin\Desktop\PROJECT 7.0.3.appx

[followed by a list of all installed certs]

After EKU filter, 6 certs were left.
After expiry filter, 6 certs were left.
After Hash filter, 1 certs were left.
After Private Key filter, 1 certs were left.
The following certificate was selected:
Issued to: XXXXXXXX
Issued by: DigiCert EV Code Signing CA (SHA2)
Expires: Thu Feb 24 01:59:59 2022
SHA1 hash: SOMEHASH
Done Adding Additional Store

Number of files successfully Signed: 0
Number of warnings: 0
Number of errors: 1

An appx file is created but running/installation is not possible as it is not signed.

delasource avatar Oct 29 '21 14:10 delasource