sign icon indicating copy to clipboard operation
sign copied to clipboard

Support for Azure Trusted Signing

Open EuanKerr opened this issue 1 year ago • 9 comments

With Azure Trusted Signing (formerly Azure Code Signing) now in public preview it would be handy to be able to sign files/clickonce using the Trusted Signing service.

Some more links:

  • https://www.powershellgallery.com/packages/TrustedSigning

EuanKerr avatar Apr 29 '24 18:04 EuanKerr

Would love to see support for this. The @ImageMagick project has a Trusted Signing certificate and we are using this to sign our installers and executables. But there is no support for that in this tool yet. And I would like to also sign my ImageMagick NuGet packages using that certificate in a GitHub pipeline.

And feel free to let me know if there is anything I can do to help.

dlemstra avatar May 08 '24 20:05 dlemstra

Throwing my weight behind this as I have a new package I want to test with and I'm trying to keep everything in GitHub actions as an added bonus.

blowdart avatar May 09 '24 15:05 blowdart

I am also supporting this request, our developers need to migrate to trusted signing, but without support for clickonce in any of the other trusted signing tools, that is not possible.

ROGG437063 avatar May 31 '24 08:05 ROGG437063

This integration should probably use the SDK https://www.nuget.org/packages/Microsoft.Trusted.Signing.Client Do take care that the SDK linked in trusted signing docs is deprecated

ROGG437063 avatar May 31 '24 15:05 ROGG437063

@ROGG437063 sorry for the confusion on the docs regarding the SDK. We have kept the current version from our preview unlisted while we prep a new release of the SDK. This SDK will become publicly listed in the very near future. https://www.nuget.org/packages/Azure.CodeSigning.Sdk cc: @Jaxelr

ianjmcm avatar May 31 '24 15:05 ianjmcm

@ROGG437063 Indeed, we expect the SDK to be publicly available once we sort through a few issues on the PR, but you can track that work here: https://github.com/Azure/azure-sdk-for-net/pull/41191

Jaxelr avatar Jun 01 '24 17:06 Jaxelr

@Jaxelr Sounds good, any estimate of when that will be merged? It would also still need integration with sign cli for vsto manifest signing, right?

ROGG437063 avatar Jun 04 '24 07:06 ROGG437063

Must to have. Please push 🙌🏻

demiliani avatar Jun 13 '24 21:06 demiliani

This prerelease version has Trusted Signing support. Thanks to @dlemstra for adding it! 👏

dtivel avatar Jun 28 '24 15:06 dtivel

This prerelease version has Trusted Signing support. Thanks to @dlemstra for adding it! 👏

This works great!

mjcheetham avatar Jul 10 '24 19:07 mjcheetham