OpenOpcSignTool
OpenOpcSignTool copied to clipboard
vcsjones
An open-source implementation of VsixSignTool.
The solution does provide a mechanism for picking the parts that can be signed (ISignatureBuilderPreset), and a mechanism for removing parts, the Sign will always add origin.psdor and origin.psdor.rels. There...
This repo helped me get through signing a VSIX package in our Azure DevOps pipeline using a certificate in Azure Key Vault. Great! However, my first attempts a running this...
Hi, I have been using CryptRetrieveTimeStamp outside of OpenOpcSignTool and found that passing it a nonce with 32 bytes as you do in OpenOpcSignTool occasionally causes the error: 0x80096005 TRUST_E_TIME_STAMP...
I am using an EV Code signing certificate that only exists in a Yubikey, so there's no .pfx file so I can't use vsixsigntool. This tool almost works, but it...
Where token access is not available it would be good to have the following command-line parameters (like other sign tools) to allow for the use of managed identity. -kvm |...
This command will verify the VSIX as closely as the VSIX installer does. 1. That all digests in the manifest are correct. 2. That all parts are signed except for...
This got complicated and is very clunky. 1. Configuration validation between Azure and Certificate is duplicated.