From bb2149aac87757aa27a22c42f45e82712d814205 Mon Sep 17 00:00:00 2001
From: Mounir IDRASSI <mounir.idrassi@idrix.fr>
Date: Sat, 11 Apr 2015 00:31:10 +0200
Subject: Windows: add a test code-signing certificate and a batch file to sign
 binaries and the installer with it.

---
 src/Signing/TestCertificate/idrix_TestRootCA.crt |  35 +++++++++++++++++++++++
 src/Signing/TestCertificate/idrix_codeSign.pfx   | Bin 0 -> 3204 bytes
 src/Signing/sign_test.bat                        |  25 ++++++++++++++++
 3 files changed, 60 insertions(+)
 create mode 100644 src/Signing/TestCertificate/idrix_TestRootCA.crt
 create mode 100644 src/Signing/TestCertificate/idrix_codeSign.pfx
 create mode 100644 src/Signing/sign_test.bat

(limited to 'src')

diff --git a/src/Signing/TestCertificate/idrix_TestRootCA.crt b/src/Signing/TestCertificate/idrix_TestRootCA.crt
new file mode 100644
index 00000000..38c3c625
--- /dev/null
+++ b/src/Signing/TestCertificate/idrix_TestRootCA.crt
@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/src/Signing/TestCertificate/idrix_codeSign.pfx b/src/Signing/TestCertificate/idrix_codeSign.pfx
new file mode 100644
index 00000000..e2279094
Binary files /dev/null and b/src/Signing/TestCertificate/idrix_codeSign.pfx differ
diff --git a/src/Signing/sign_test.bat b/src/Signing/sign_test.bat
new file mode 100644
index 00000000..d7976828
--- /dev/null
+++ b/src/Signing/sign_test.bat
@@ -0,0 +1,25 @@
+PATH=%PATH%;%DDK%\bin\x86
+
+set PFXNAME=TestCertificate\idrix_codeSign.pfx
+set PFXPASSWORD=idrix
+
+signtool sign /v /a /f %PFXNAME% /p %PFXPASSWORD% /ac TestCertificate\idrix_TestRootCA.crt /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\veracrypt.sys"
+signtool sign /v /a /f %PFXNAME% /p %PFXPASSWORD% /ac TestCertificate\idrix_TestRootCA.crt /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\veracrypt-x64.sys"
+
+signtool sign /v /a /f %PFXNAME% /p %PFXPASSWORD% /ac TestCertificate\idrix_TestRootCA.crt /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\VeraCrypt.exe"
+signtool sign /v /a /f %PFXNAME% /p %PFXPASSWORD% /ac TestCertificate\idrix_TestRootCA.crt /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\VeraCrypt Format.exe"
+signtool sign /v /a /f %PFXNAME% /p %PFXPASSWORD% /ac TestCertificate\idrix_TestRootCA.crt /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\VeraCryptExpander.exe"
+
+cd "..\Release\Setup Files\"
+
+copy /V /Y ..\..\..\Translations\*.xml .
+
+"VeraCrypt Setup.exe" /p
+
+del *.xml
+
+cd "..\..\Signing"
+
+signtool sign /v /a /f %PFXNAME% /p %PFXPASSWORD% /ac TestCertificate\idrix_TestRootCA.crt /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\VeraCrypt Setup 1.0f-2.exe"
+
+pause
\ No newline at end of file
-- 
cgit v1.2.3