windows-installer icon indicating copy to clipboard operation
windows-installer copied to clipboard

can certificateFile accept base64

Open steveoh opened this issue 3 years ago • 2 comments

Having a file available for signing is a bit problematic in a public build pipeline. OSX allows a base64 certificate string to be used which can be stored as a secret very simply. Is this an option or a possibility for this package?

steveoh avatar Oct 14 '21 16:10 steveoh

Just came here to ask the same question. Looks like crickets...

gregcotten avatar Dec 30 '22 20:12 gregcotten

certificate is passed directly to Windows SDK signtool.exe verbatim, whatever it supports, Squirrel supports. Having a ~7000+ byte environment variable might blow the max length for the environment block for a process as well (though I definitely sympathize with the want to not have to inject secret files in CI then mop them up afterwards)

anaisbetts avatar Dec 31 '22 14:12 anaisbetts