Microsoft digital signature code signing using the SHA256 certificate

Source: Internet
Author: User

Microsoft was the first to announce the SHA-1 deprecation program, and after 2016 years windows and IE will no longer trust the SHA-1 certificate. Just as our company's digital signature also expires, simply re-applied for SHA256 and SHA1 new digital certificate, used to sign the product.

Looking at Signcode's document discovery,signcode 's command line-A is the signature algorithm used to specify a digital signature, supports only SHA1 and MD5, and does not support sha256.

/fd to specify signatures, MD5, SHA1, SHA256 are supported:

SignTool.exe sign/v/as/ac/f d:\test\sign\sign_sha256\xxx.pfx/p xxxx/t SHA256 signed file path


The AS option does not recognize an issue that may cause: thesigntool version is too low, using the WIN10 SDK, directory C:\Program Files (x86) \ Windows Kits\10\bin\x86\signtool.exe. Dependent libraries have ncrypt.dll,bcrypt.dll and other DLLs that are only available on Vista and above systems. Need to copy to the old system to use SignTool.exe, while copying the same directory:


The following error occurred in the trial:

SignTool error:the/t option is incompatible with THE/AS option.

SignTool error:specify the RFC 3161 timestamp server ' s URL instead with/tr.

Change/T to/tr, but error occurred:

SignTool error:the specified timestamp server either could not being reached orreturned an invalid response.

After some effort, replace the with or ttp:// solve the problem. and Ttp:// are newer timestamp service formats, compatible with/T and /tr, and/HTTP The is only available for/T. Finally, two signature instructions are placed in a batch file:

set sign_folder=%~dp0%

%sign_folder%\signtool.exe sign/v/F%sign_folder%example.pfx/p Examplepassword "%1"

%sign_ Folder%\signtool.exe sign/v /as  /TR/HTTP/ TIMESTAMP.WOSIGN.COM/RFC3161/FD sha256   "%1"

This article is from the "8403723" blog, please be sure to keep this source

Microsoft digital signature code signing using the SHA256 certificate

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.