Skip to content

How to off Test Signing in buildtap.py #169

@lucidmaj7

Description

@lucidmaj7

Since File Digest Algorithm is not set in the test signing settings of the visual studio project, it is attempted with sha1. However, sha1 is not supported and sha256 is recommended. (sha1 is deprecated.)

When building with buildtap.py, it tries test signing by default, but the build fails for this reason.

  The driver will be test-signed. Driver signing options can be changed from the project properties.
  Sign Inputs: C:\Users\..............\tap0000.sys
  C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x86\signtool.exe sign /ph /sha1 "E81EDA6C7D8D72045CADBEA3FE0625EDEF77C047"
SIGNTASK : SignTool error : No file digest algorithm specified. Please specify the digest algorithm with the /fd flag. Using /fd SHA256 is recomme
nded and more secure than SHA1. Calling signtool with /fd sha1 is equivalent to the previous behavior. In order to select the hash algorithm used
in the signing certificate's signature, use the /fd certHash option. [C:\Users\.......\tap-windows6\src\tap-windows6.vcxproj]

I wish it was possible to build without testsign.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions