SIGNTOOL WITH CER FILE HOW TO
SIGNTOOL WITH CER FILE INSTALL

Openssl pkcs12 -in code-cert.p12 -nokeys -nodes -out temp-cert.pem Openssl rsa -in temp-rsa.pem -outform PVK -pvk-strong -out code-cert.pvk Openssl pkcs12 -in code-cert.p12 -nocerts -nodes -out temp-rsa.pem

SIGNTOOL WITH CER FILE INSTALL

One rub, to convert the certificates you need to use a newer version of openssl than what ships with OS X, install using brew install openssl alias openssl='/usr/local/opt/openssl/bin/openssl' I found converting to a SPC and PVK files worked best. If you are signing on OS X, you need to convert it into a usable format. If you are signing on Windows, you can use the P12 certificate directly. From your keychain, you can export the certificate to a PFX/P12 file. Certificate FormatĪfter receiving the certificate, you download it to your computer’s keychain, on Mac it works best to use Safari or Chrome to do this.

SIGNTOOL WITH CER FILE HOW TO

Be sure to know how to retrieve calls or voice mail from your company number. It required providing company information and a corporate phone number to call and verify. I followed the instructions at Digicert to get a Microsoft Authenticode certificate.

Our company is distributed around the world and I don’t want to be the only one who can release the app. I ended up going with a standard certificate and not an EV cert, since the EV cert required a physical hardware device. Based on this list of recommended vendors, I decided to get a standard certificate from Digicert, I imagine the process is relatively the same for the other vendors. This wasn’t too bad, just a little time consuming and requires some real world contact with actual people. For info on building the installer, see electron-builder. Note, the instructions are for signing an already built Setup.exe installer. So here’s a quick guide on lessons learned, that might help you get your installer signed properly from the start. You can see an improperly signed application with the “Publisher: Unknown” Downloadable and distributed software is much different than server side web apps that we’re used to. The tricky part distributing the apps is getting them packaged properly for each platform, and to sign these packages properly. Electron works on Windows, OS X and Linux and is used by Slack, Github and Microsoft among others. To build the desktop apps, we use Electron which bundles Javascript, Node and the Chromium browser together into a cross-platform application. Today, we released our Desktop app on Windows, the app takes advantage of all the work put in creating the Calypso app which is the Javascript client code that powers, which is all open source.

Signtool with cer file