From bc223af05dfcde5f2dc3193182ba218798efc10a Mon Sep 17 00:00:00 2001 From: Marcos Oviedo Date: Thu, 18 May 2023 16:47:33 -0300 Subject: [PATCH] Helper utilities to showcase windows authenticode signing (#11780) This relates to #11013 Helper utilities to showcase Windows Authenticode signing. The fleetdm.pfx certificate file is a self-signed test certificate --- orbit/tools/build/fleetdm.pfx | Bin 0 -> 2662 bytes orbit/tools/build/sign-windows.sh | 37 ++++++++++++++++++++++++++++++ 2 files changed, 37 insertions(+) create mode 100644 orbit/tools/build/fleetdm.pfx create mode 100755 orbit/tools/build/sign-windows.sh diff --git a/orbit/tools/build/fleetdm.pfx b/orbit/tools/build/fleetdm.pfx new file mode 100644 index 0000000000000000000000000000000000000000..fa03ea1d336eeeae6a1e90d9acdec78849144d97 GIT binary patch literal 2662 zcmZWpc{tQ<7yb=n7(|w_FOyxiv6g+y7R8h#jdd)kB#eY?Lzu==2-&kHYp8c*nNWnW zWzX2xBE*CU-_-Sf?|XgMcRklxp8G!MKF>eTL0}nOXh5_GETa$vdOF%PdiMl~9+Zb= zWCddxnW!*50t*5Dhobuq#?pO5VClY4Z4tuscNa4wh$asUK0;u@`v?ID<9}hQI189T zzI^+w$UH@phK9Z$j0KOSaDNf4VybY)J;2s3m>gaT7eY$l19O|3yeo(z8*QKO zqxLe)ehc{M)c0#3NxJ=hES`R2KGfQDZLku9xNnt^SkM~f$$`d5wThd6cpq)_v8mK% z#VY{zHaeBy7?K|1_`u+s*Gi@xShmb~vui)Pb*NE0a>rJ+4IP<58YG{R61^36U;~6} z*;V>~A0OkN5-EoCAq)-_={T@pl;bFQ!{79g#<=m`;|O4tR;=B3vAfNB0Xu8M^=nRk z!~0mJRz)p4;|2F--{q|nvNv{Hk-DjVs1EZ)vsqiV0ag+4fLBOf1#(6bRw&^OFEE@P zMvB-}8)nui9YO!H9-UC|{em)(t6EsS1lLfR3;Vh}8XIWIk$`%j#ueTy-rGH#Abu)% z8CINjle<}toRgT)mS#5Po{=zEw5*KZ4Cz7T4znoy-%y#b-)S@xf5bcF=LgSeG-tIDjd%Q5D}MeguY`#RspSOC40eH+CS%=;%;$81 z7So}g2C7fsN{KKIa(LYrcgJ+MpS*m){vfIm*Oyu9o|vTMsVld{z$sIwnJ*z=l9q13 zqZ>0dXCx9`O}KIdUpbuk_Cwrcm$Y33b-FZd_#@|`BVNRnIay+6bldxQDGsOU*p!2_ z7hi39+DCDktb1dppup!5q^lT&Q<|;!tZXZmF!K5tslhIYY%<$lIFt-S1=<<9U+>_1 zZQGA33Tia$&DO=^loq*U*PF;k-p>Z&YG|L<|a|=u)cU8uY}`VXYDDj)=%-n-qDHGG1=-`7}=u;h^WH~ zKY}c>-#{tgJa1Xrn7WU_Xr1ukxLiOe`)+`&3^gV`)LIisM(m??S+gt>qJH%FwpNPq znxQ5u4%1gf{q;L=GdZ^`6x)E#=;FOV+X9i>sjhXe5BFxK*Or1jlWlicKey3Q-k05} z*Pdb`FTWc1nNKP_si3ee#$1kleC=m@RB;(RZTyfCcjOsWz1Q%l}|AUa4aoBvxM#Iqy_{j5vq?8yxz?1K+zF1 z*ju|@qRW^`ka@3FadbSsKJ?^`vfZZ~J|)ewnJ;Ax?5;IsGraS&xe|Usdg^>urZY`b z$9s3k_mrYJhIC>A$)k?HT0Or^TSHUh`G(FrVL^|cU!P|wtU}PYv9TlbJvcDBLZr=0 zA}oA_e@I1H_sT)xR}}|3RSNC$BJe|qWe&PHz91$b-$kr!)icCb5XVM^IRu}B%V;z} z?MqkGNGs0WJ&N-NDy14Agwf6XmJex1yhcSI?JUMA`^<^@pR;kqNiHAh$#OELuBUo6 zmMtGtJC%{bAuE`0HuAd8UbYI{+JK3tnVzb#5DG#G0WL^{yod!mF*@~T2 zwF|B+lb?dqfXb?`F(9aX6|OF8*NJOTT3P@)z6kr%l^0cz@k( zk@vH+jVGmVNd-6rML}b2^Jj)+7T&$Q39l6IC0S1u2d<7mZz(pSoIO>{4#k1S==r;(D^at(cOu#5{&#>EDUsN31tyT7oi>%1ZC)qTInLko=8sZErW#jPAdiS#` z@V#HIdweMv?7V7pHm9f|rakeJz%c`pz)9F1d+4tl8*$9$q&|EudOh#$-bK$uUBgns z%=-2dVXIG4gvS97dvNTIr}rW)`kC=Qbsg4R1{%;diB4kMm$0 z+3fh%+nw?9u1)dgJN6g8!7G<5t6x`)sjWxsNltVgT;FIiDZ&O^x-q22`hI-D>NJ1&6 zwAwR>_Aoqc19@vT_enN`&{X16Z#@*480UwKN#<{|pEHSuaM$=`)d`CYE#?GCQKS%> z2w?<0gieNqmWB_^8C/dev/null 2>&1 ; then + echo "Osslsigncode utility is not present. Binary cannot be signed." + exit 1 +fi + +work_file="${input_file}_old" + +mv "$input_file" "$work_file" + +osslsigncode sign -pkcs12 "./orbit/tools/build/fleetdm.pfx" -pass "fleetdm" -n "Fleet Osquery" -i "https://www.fleetdm.com" -t "http://timestamp.comodoca.com/authenticode" -in "$work_file" -out "$input_file" + +retVal=$? +if [ $retVal -ne 0 ]; then + echo "There was an error when signing." +else + echo "Binary $input_file was successfully signed." + rm $work_file +fi +exit $retVal \ No newline at end of file