Changeset 107319 in vbox for trunk/src/VBox/Additions

Timestamp:

Dec 13, 2024 4:29:57 PM (2 months ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

166350

Message:

Additions: If the build is SHA2 signed only (used by ARM64 because there is no legacy) just the SHA2 cert is relevant.

File:

• trunk/src/VBox/Additions/WINNT/Installer/Makefile.kmk (modified) (2 diffs)

trunk/src/VBox/Additions/WINNT/Installer/Makefile.kmk

@@ -86 +86 @@
  endef
 
- if !defined(VBOX_CERTIFICATE_SHA2_SUBJECT_NAME) && !$(intersects win all 1,$(VBOX_WITH_CORP_CODE_SIGNING))
+ if !defined(VBOX_CERTIFICATE_SUBJECT_NAME) && !$(intersects win_planb,$(VBOX_WITH_CORP_CODE_SIGNING))
+  # No SHA1 cert at all, no weird Plan B style signing, just the SHA2 cert.
+  $(evalcall2 def_VBoxAdditionsInstCertFiles,vbox-sha256.cer,$(VBOX_PATH_ADDITIONS)/VBoxGuest.sys, \
+        extract-exe-signer-cert, 1)
+  VBOX_GA_CERT_ROOT_SHA2 := vbox-sha256-root.cer
+  $(evalcall2 def_VBoxAdditionsInstCertFiles,$(VBOX_GA_CERT_ROOT_SHA2),$(VBOX_PATH_ADDITIONS)/VBoxGuest.sys, \
+        extract-signer-root --self-signed-roots-from-system, 1)
+  ifdef VBOX_TSA_SHA2_URL_ARGS
+   VBOX_GA_CERT_ROOT_SHA2_TS := vbox-sha256-timestamp-root.cer
+   $(evalcall2 def_VBoxAdditionsInstCertFiles,$(VBOX_GA_CERT_ROOT_SHA2_TS),$(VBOX_PATH_ADDITIONS)/VBoxGuest.sys, \
+        extract-timestamp-root --self-signed-roots-from-system, 1)
+  endif
+ else if !defined(VBOX_CERTIFICATE_SHA2_SUBJECT_NAME) && !$(intersects win all 1,$(VBOX_WITH_CORP_CODE_SIGNING))
+  # No SHA2 signing, just the SHA1 cert.
   $(evalcall2 def_VBoxAdditionsInstCertFiles,vbox.cer,$(VBOX_PATH_ADDITIONS)/VBoxGuest.sys, \
         extract-exe-signer-cert, 0)
@@ -98 +111 @@
   endif
  else
+  # Dual signing, both SHA1 and SHA2 driver cert, plus maybe SHA2 userland cert.
   $(evalcall2 def_VBoxAdditionsInstCertFiles,vbox-sha1.cer,$(VBOX_PATH_ADDITIONS)/VBoxGuest.sys, \
         extract-exe-signer-cert, 0)