uthenticode

uthenticode copied to clipboard

Support to extract additional certificate feature

1

Support for extracting certificate features like sign date, expire date, sign algorithm, thumbprint, sign key, cert hash , certdata values etc.

shubham07507

Expose `not_before` and `not_after` for each Certificate

2

These are easy enough to extract with `X509_get0_notBefore` and `X509_get0_notAfter`. Each returns an `ASN1_TIME *`, which can be dumped to a BIO using `ASN1_TIME_print`.

woodruffw

svcli: Support extracting the SignedData blobs from a PE

8

`svcli` should learn an `-x`, `--extract` flag or similar to dump all of the `SignedData` blobs it encounters. This would make it easier to use `openssl asn1parse` and other command-line...

woodruffw

Instead of just archiving each build's `build` directory and attaching these to the release, we should run the `install` target and archive the install tree.

woodruffw

Add an API for full-chain verification

9

We'll never support verification against the trusted publishers store, but we *could* support verification against a *particular* user-supplied certificate. That way, users could at least do full-chain verification of binaries...

woodruffw

In addition to the signature and certificate chain, we should also verify the timestamp signature embedded in each Authenticode SignedData. Documentation for these is a little inconsistent, but they seem...

woodruffw

If we detect page hashes embedded in the Authenticode data, we should verify them as well.

woodruffw

Zeros embedded in subject and issuer fields when using certificates generated with makecert (e.g. self-signed for test-signing during driver development)

2

It appears as if `makecert` writes Windows-style `wchar_t*` into these fields verbatim instead of encoding them as, say, UTF-8. This is an issue as it will lead to the strings...

hugmyndakassi

Not all used headers are explicitly included

1

Hi, wanted to bring another point to your attention. I think you are technically missing an `#include ` in `uthenticode.h` between `` and ``. This doesn't cause an issue because...

hugmyndakassi

Testing out trunk check on a C++ repo.

oldsj