Release plan discussion

[mcuee]

We will use 1.2.7.x as snapshot release version. Probably the next formal version should be labeled as 1.2.8.0.

V1.2.7.3 (11/13/2021) - SNAPSHOT RELEASE

• driver: sign the drivers using SHA1 as well as SHA256

• driver: sign the drivers after microsoft and not before (win7 fix)

V1.2.7.2 (10/25/2021) - SNAPSHOT RELEASE

• driver: sign the drivers using EV certificate: libusb0.sys snapshot release and digital signature #24

• driver: fix possible stack corruption: HPE team - found a stack override problem on libusb-win32 #19

• lib: fix missing check for failed CloseHandle(): Bug: usb_free_async should check CloseHandle return value #12

V1.2.7.1 (09/18/2019) - SNAPSHOT RELEASE

• Removed support for IA64
• Removed support for W2K
• Properly allocate NX pool memory on Win8+

V1.2.6.0 (01/17/2012)

• Official release.
• Removed ISO maximum transfer size restrictions/transfer splitting.
• Fixed inf-wizard device notification issue.

[mcuee]

I think only #25 needs to be fixed.

[mcuee]

@dontech Please check if you have any other things for next release. Thanks.

[mcuee]

@dontech Please also help to check those I marked as "wontfix" before you took over from Travis. If you think some of them are worth implementing, then please go ahead to remove the "wontfix" label. Thanks.

[tormodvolden]

Would be nice if we can have debug versions also.

[mcuee]

Would be nice if we can have debug versions also.

Good point.

[mcuee]

#25 has been merged.

[mcuee]

The following issues have been fixed. We are more or less ready for the next release.

• HPE team - found a stack override problem on libusb-win32 #19
• #16 allow zero length control transfer (without buffer) #21
• Remove inf-wizard from the formal release #25
• Remove libusb1 folder #27

As for the digital signature, now Windows 7 is already working. So we are already fine here.

• libusb0.sys snapshot release and digital signature #24

[mcuee]

Release related work to be done.

• update changelog
• including the change log in the installer
• create debug version of bin and installer

[mcuee]

@dontech Please also help to check those I marked as "wontfix" before you took over from Travis. If you think some of them are worth implementing, then please go ahead to remove the "wontfix" label. Thanks.

I have removed most of the "wontfix" labels except a few like USB hub support.

[mcuee]

@dontech I have changed to the libusb-win32 Sourceforge default download version from 1.2.6.0 release to 1.2.7.3 snapshot release so that the people out there can use the the updated version. It should work for Windows 7/8/8.1/10 so we should still be okay.

https://sourceforge.net/projects/libusb-win32/files/

[mcuee]

@dontech
For the next release, Windows 7 support may be difficult as the cross-certification expired in Dec 2021.

C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64> .\signtool.exe verify /v /kp C:\temp\libusb-win32-bin-1.2.7.3\bin\amd64\libusb0.sys

Verifying: C:\temp\libusb-win32-bin-1.2.7.3\bin\amd64\libusb0.sys

Signature Index: 0 (Primary Signature)
Hash of file (sha256): 2148A71E5EF84643B11A1A528E421B3860D2D07831FB7BCECA9D0E5DE7B4AC43

Signing Certificate Chain:
Issued to: Microsoft Root Certificate Authority 2010
Issued by: Microsoft Root Certificate Authority 2010
Expires: Sun Jun 24 06:04:01 2035
SHA1 hash: 3B1EFD3A66EA28B16697394703A72CA340A05BD5

    Issued to: Microsoft Windows Third Party Component CA 2014
    Issued by: Microsoft Root Certificate Authority 2010
    Expires:   Tue Oct 16 04:41:27 2029
    SHA1 hash: 1906DCF62629B563252C826FDD874EFCEB6856C6

        Issued to: Microsoft Windows Hardware Compatibility Publisher
        Issued by: Microsoft Windows Third Party Component CA 2014
        Expires:   Fri Dec 03 06:25:28 2021
        SHA1 hash: 984E03B613E8C2AE9C692F0DB2C031BF3EE3A0FA
The signature is timestamped: Sat Nov 13 19:54:14 2021
Timestamp Verified by:
Issued to: Microsoft Root Certificate Authority 2010
Issued by: Microsoft Root Certificate Authority 2010
Expires: Sun Jun 24 06:04:01 2035
SHA1 hash: 3B1EFD3A66EA28B16697394703A72CA340A05BD5

    Issued to: Microsoft Time-Stamp PCA 2010
    Issued by: Microsoft Root Certificate Authority 2010
    Expires:   Wed Jul 02 05:46:55 2025
    SHA1 hash: 2AA752FE64C49ABE82913C463529CF10FF2F04EE

        Issued to: Microsoft Time-Stamp Service
        Issued by: Microsoft Time-Stamp PCA 2010
        Expires:   Thu Jan 13 01:28:25 2022
        SHA1 hash: A04C15E8F4C630938C2935B1375329AF93CC90D4
Cross Certificate Chain:
Issued to: Microsoft Root Certificate Authority 2010
Issued by: Microsoft Root Certificate Authority 2010
Expires: Sun Jun 24 06:04:01 2035
SHA1 hash: 3B1EFD3A66EA28B16697394703A72CA340A05BD5

    Issued to: Microsoft Windows Third Party Component CA 2014
    Issued by: Microsoft Root Certificate Authority 2010
    Expires:   Tue Oct 16 04:41:27 2029
    SHA1 hash: 1906DCF62629B563252C826FDD874EFCEB6856C6

        Issued to: Microsoft Windows Hardware Compatibility Publisher
        Issued by: Microsoft Windows Third Party Component CA 2014
        Expires:   Fri Dec 03 06:25:28 2021
        SHA1 hash: 984E03B613E8C2AE9C692F0DB2C031BF3EE3A0FA
Successfully verified: C:\temp\libusb-win32-bin-1.2.7.3\bin\amd64\libusb0.sys

Number of files successfully Verified: 1
Number of warnings: 0
Number of errors: 0

[mcuee]

Further discussions here.
https://community.osr.com/discussion/293709/signing-driver-for-win7

If in the end there is no solution, we have to drop Windows 7 support.

[dontech]

@mcuee yes there clearly is a problem there. I have not been able to solve this either.

Either i am missing something or Microsoft made a huge backwards compability support blunder, which is problematic when you consider how many people still use that....

AFAIK drivers for Windows 7 can only be signed using their cross-certificate, and since they have stopped issueing those, then i fail to see how that would work.

They need to issue a new cross-certificate or patch up Windows-7 to ignore that check.... i guess the odds of any of those two are smaller than my odds of becoming the president of Mars.

So i think, unless something happens, that we have to drop support for Windows 7.

[dontech]

I would suggest that we announce that this is the last version supporting Windows 7, and then remove it in the next release. We can state in the release notes that it must be signed manually (local signing), or installed using the "disable driver signing" options.