Scripts

Timestamp:

Sep 6, 2022 5:59:08 PM (2 years ago)

Author:

vboxsync

Message:

Installer/win: UnpackBlessedDrivers.cmd can't verify pre-W10 signatures using signtool.exe since that rejects the signatures (ignores timestamp).

File:

trunk/src/VBox/Installer/win/Scripts/UnpackBlessedDrivers.cmd

-              r96407
+              r96613
     "%_MY_SIGNTOOL%" verify /kp /c "%_MY_OPT_BINDIR%\%%d.cat"        "%_MY_OPT_BINDIR%\%%d.inf" || goto end_failed
     "%_MY_SIGNTOOL%" verify /kp /c "%_MY_OPT_BINDIR%\%%d.cat"        "%_MY_OPT_BINDIR%\%%d.sys" || goto end_failed
+    @echo * Verifying %%d against %%d-PreW10.cat...
+    "%_MY_SIGNTOOL%" verify /kp /c "%_MY_OPT_BINDIR%\%%d-PreW10.cat" "%_MY_OPT_BINDIR%\%%d.inf" || goto end_failed
+    "%_MY_SIGNTOOL%" verify /kp /c "%_MY_OPT_BINDIR%\%%d-PreW10.cat" "%_MY_OPT_BINDIR%\%%d.sys" || goto end_failed
+    rem The following is disabled because signtool.exe does not accept these
+    rem signatures because it fails to look at the timestamp. Eventually should
+    rem replace this by doing out own signature verification in RTSignTool.
+    rem @echo * Verifying %%d against %%d-PreW10.cat...
+    rem "%_MY_SIGNTOOL%" verify /kp /c "%_MY_OPT_BINDIR%\%%d-PreW10.cat" "%_MY_OPT_BINDIR%\%%d.inf" || goto end_failed
+    rem "%_MY_SIGNTOOL%" verify /kp /c "%_MY_OPT_BINDIR%\%%d-PreW10.cat" "%_MY_OPT_BINDIR%\%%d.sys" || goto end_failed
+)
 :no_sign_verify

Note: See TracChangeset for help on using the changeset viewer.