From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from omta002.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) by sourceware.org (Postfix) with ESMTPS id 60E46395248C for ; Sun, 20 Nov 2022 07:26:41 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 60E46395248C Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=SystematicSw.ab.ca Authentication-Results: sourceware.org; spf=none smtp.mailfrom=systematicsw.ab.ca Received: from shw-obgw-4004a.ext.cloudfilter.net ([10.228.9.227]) by cmsmtp with ESMTP id wPHvota7YyQ9eweiuoZ5B6; Sun, 20 Nov 2022 07:26:40 +0000 Received: from [10.0.0.5] ([184.64.124.72]) by cmsmtp with ESMTP id weitoQCHYCRu9weiuohugR; Sun, 20 Nov 2022 07:26:40 +0000 X-Authority-Analysis: v=2.4 cv=QIh7+yHL c=1 sm=1 tr=0 ts=6379d6b0 a=oHm12aVswOWz6TMtn9zYKg==:117 a=oHm12aVswOWz6TMtn9zYKg==:17 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=CCpqsmhAAAAA:8 a=7DrQrguiAAAA:8 a=yPf7pi8k6090NVXkwu8A:9 a=QEXdDO2ut3YA:10 a=D19Tzz672-QA:10 a=aStFH7ABWgQA:10 a=sRI3_1zDfAgwuvI8zelB:22 a=ul9cdbp4aOFLsgKbc677:22 a=5p0t1moz68ydotlU2Z85:22 Message-ID: <5b5164e3-8003-d336-3778-836a1216f863@SystematicSw.ab.ca> Date: Sun, 20 Nov 2022 00:26:39 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.5.0 To: cygwin@cygwin.com Subject: Re: Adding an embedded signature on setup-x86_64.exe Reply-To: cygwin@cygwin.com Content-Language: en-CA In-Reply-To: Cc: dalestan@gmail.com From: Brian Inglis Organization: Systematic Software Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfPRDjuP2SWkEfxmao+sviYqfZnwv3KsgiS+Tm88101TBQcsz+BIOm2EWW6TOLacr7KuY/y/TYCSA8mKB3AMIEDAQ3ttCHl29ZqCzLlbi1+nsQvUgDpkg yhqqrMsnVZZ8KaCvqtqcc1Tk+MOhB+UgmsCu70Shg3DNETDENuBZ8t0ygA1VkVd6VKws63igMWqRnrmBrewxeu9mkw6yw6l3V0J+5ybi05rgMhApqo8+l8mR X-Spam-Status: No, score=-1163.6 required=5.0 tests=BAYES_00,KAM_DMARC_STATUS,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On Fri Nov 18 21:15:04 GMT 2022, Dale McCoy wrote: > I use Cygwin in the course of work, and while I can use the external gpg > signature to verify the validity of setup-x86_64.exe, my IT department > can't see that step. They get somewhat concerned when they see that Windows > thinks setup-x86_64.exe is unsigned, and I certainly don't blame them. > Can I convince you to also embed a signature in the installer, so Windows > recognizes the file is signed? > I couldn't find a previous request on the mailing list for this, but I may > have missed it in my attempts to grep the monthly digests. See thread "Should cygwin's setup*.exe be signed using Sign Tool?": https://cygwin.com/pipermail/cygwin/2015-April/220978.html https://inbox.sourceware.org/cygwin/E1Ydjc5-0000kv-WD@rmm6prod02.runbox.com/ In case we ever need it, one of our setup maintainers packaged osslsigncode: https://cygwin.com/packages/summary/osslsigncode-src.html -- Take care. Thanks, Brian Inglis Calgary, Alberta, Canada La perfection est atteinte Perfection is achieved non pas lorsqu'il n'y a plus rien à ajouter not when there is no more to add mais lorsqu'il n'y a plus rien à retirer but when there is no more to cut -- Antoine de Saint-Exupéry