X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 60E46395248C
Authentication-Results: sourceware.org; dmarc=none (p=none dis=none)
 header.from=SystematicSw.ab.ca
Authentication-Results: sourceware.org;
 spf=none smtp.mailfrom=systematicsw.ab.ca
X-Authority-Analysis: v=2.4 cv=QIh7+yHL c=1 sm=1 tr=0 ts=6379d6b0
 a=oHm12aVswOWz6TMtn9zYKg==:117 a=oHm12aVswOWz6TMtn9zYKg==:17
 a=IkcTkHD0fZMA:10 a=w_pzkKWiAAAA:8 a=CCpqsmhAAAAA:8 a=7DrQrguiAAAA:8
 a=yPf7pi8k6090NVXkwu8A:9 a=QEXdDO2ut3YA:10 a=D19Tzz672-QA:10
 a=aStFH7ABWgQA:10 a=sRI3_1zDfAgwuvI8zelB:22 a=ul9cdbp4aOFLsgKbc677:22
 a=5p0t1moz68ydotlU2Z85:22
Message-ID: <5b5164e3-8003-d336-3778-836a1216f863@SystematicSw.ab.ca>
Date: Sun, 20 Nov 2022 00:26:39 -0700
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
 Thunderbird/102.5.0
To: cygwin AT cygwin DOT com
Subject: Re: Adding an embedded signature on setup-x86_64.exe
Content-Language: en-CA
In-Reply-To: <CAMU-TAuPF3DZPYe3xJ0F_GyrChZPRXjXbYAfD6tt9mY+a7j8kQ@mail.gmail.com>
Cc: dalestan AT gmail DOT com
From: Brian Inglis <Brian DOT Inglis AT SystematicSw DOT ab DOT ca>
Organization: Systematic Software
X-CMAE-Envelope: MS4xfPRDjuP2SWkEfxmao+sviYqfZnwv3KsgiS+Tm88101TBQcsz+BIOm2EWW6TOLacr7KuY/y/TYCSA8mKB3AMIEDAQ3ttCHl29ZqCzLlbi1+nsQvUgDpkg
 yhqqrMsnVZZ8KaCvqtqcc1Tk+MOhB+UgmsCu70Shg3DNETDENuBZ8t0ygA1VkVd6VKws63igMWqRnrmBrewxeu9mkw6yw6l3V0J+5ybi05rgMhApqo8+l8mR
X-Spam-Status: No, score=-1163.6 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 KAM_LAZY_DOMAIN_SECURITY, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_NONE,
 TXREP autolearn=no autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 2AK7RPW5032117

On Fri Nov 18 21:15:04 GMT 2022, Dale McCoy wrote:
> I use Cygwin in the course of work, and while I can use the external gpg
> signature to verify the validity of setup-x86_64.exe, my IT department
> can't see that step. They get somewhat concerned when they see that Windows
> thinks setup-x86_64.exe is unsigned, and I certainly don't blame them.
> Can I convince you to also embed a signature in the installer, so Windows
> recognizes the file is signed?
> I couldn't find a previous request on the mailing list for this, but I may
> have missed it in my attempts to grep the monthly digests.

See thread "Should cygwin's setup*.exe be signed using Sign Tool?":

	https://cygwin.com/pipermail/cygwin/2015-April/220978.html
https://inbox.sourceware.org/cygwin/E1Ydjc5-0000kv-WD AT rmm6prod02 DOT runbox DOT com/

In case we ever need it, one of our setup maintainers packaged osslsigncode:

	https://cygwin.com/packages/summary/osslsigncode-src.html

-- 
Take care. Thanks, Brian Inglis			Calgary, Alberta, Canada

La perfection est atteinte			Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter	not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer	but when there is no more to cut
			-- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple