Changeset 102054 in vbox

Timestamp:

Nov 9, 2023 8:39:08 PM (13 months ago)

Author:

vboxsync

Message:

/Config.kmk,Installer/win: If VBOX_WITH_VBOX_LEGACY_TS_CA is set use bldRTSignTool to extract the legacy timestamp CA, avoiding a hard to find misconfiguration opportunity. Eliminates the last use of VBOX_LEGACY_TS_CA_FILE. bugref:8691

Location:

trunk

Files:

• Config.kmk (modified) (1 diff)
• src/VBox/Installer/win/Stub/Makefile.kmk (modified) (1 diff)

trunk/Config.kmk

@@ -4469 +4469 @@
    endif
   endif
-  VBOX_LEGACY_TS_CA_FILE = $(VBOX_PATH_SRC_CERTIFICATES)/Timestamp-VBoxLegacyWinCA.crt
 
  else ifeq ($(KBUILD_HOST),darwin)

trunk/src/VBox/Installer/win/Stub/Makefile.kmk

@@ -103 +103 @@
         $(RM) -f -- "[email protected]" "[email protected]" "[email protected]" "[email protected]"
  ifdef VBOX_WITH_VBOX_LEGACY_TS_CA
-        $(VBOX_BIN2C) -ascii --append VBoxLegacyWinCA "$(VBOX_LEGACY_TS_CA_FILE)" $@
+        $(RM) -f -- "[email protected]_tsca"
+        $(VBOX_RTSIGNTOOL) extract-timestamp-root --signature-index 0 --input "$(PATH_STAGE_SYS)/VBoxSup.sys" --output "[email protected]_tsca" --der
+        $(VBOX_BIN2C) -ascii --append VBoxLegacyWinCA "[email protected]_tsca" $@
+        $(RM) -f -- "[email protected]_tsca"
  endif