busybox-w32
busybox-w32 copied to clipboard
Please sign the executable
Sorry to bother you again. I was seeing that there are signature files so I thought that it would be nice if the signature was in the exe itself (in a way that can be seen from explorer).
There is a method of signing on Linux here.
@vszakats (who has raised some busybox-w32 issues in the past) has a nice script to handle certificate management.
I've tried this out but I'm not convinced. While it's nice that the signature can be included with the binary:
- a simple signature adds 3.5K to the size of the executable, with a timestamp it adds 8.5K;
- a self-signed certificate results in unpleasant warnings in the explorer properties dialog;
- I'm pretty sure more people will never bother to check the signature.
I agree that self-signed signatures aren't really useful for most cases. A signature accepted by default Windows installations will almost certainly cost money though. At least I couldn't find a free option as of mid last year.
I'm asking it because in addition of being visible in explorer which is nice, in the future I will also add signature verification in my scripts.
PS: To see an example, these OpenSSL binaries are digitally signed.
Code signing certs cost money though.