I have renewed my codesign certificate, and (unfortunately & unbeknown to me) our supplier is only providing EV certificates. I now have the certificate on a USB Token & don’t have a PFX file.
The command line signtool appears to work okay - but I have to enter the password via a password prompt.
I’m trying to figure out how to integrate this into my FinalBuilder workflow & I’ve replicated the command line options in your Signtool action properties.
I do not get a password prompt and the signtool operation fails:
Command Line: signtool.exe sign /a /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 d:\projects\test.exe Done Adding Additional Store Error information: "Error: SignerSign() failed." (-2147023673/0x800704c7) SignTool Error: An unexpected internal error has occurred.
The command line that works:
D:\DeploymentShared\#CodeSign>signtool sign /a /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 d:\projects\test.exe
The two look identical - I’m guessing that I’m not seeing the password prompt?
a) How do I get the password prompt to appear? and
b) Is there anyway I can auto-fill or provide the password? (Using the /p option appears to require the /f option & I don’t have files anymore)
Thanks in advance