More information as to how Code signing works

[metkhoo]

Is your feature request related to a problem? Please describe.
It is not clear how the "signtool command-line" feature works.
How does it find signtool.exe?
NOTE:
I can sign with signtool.exe from a command line but when I transfer the paramters to the Signtool command-line it fails.

Error message is

ERROR: Could sign setup executable!

Should say

ERROR: Could not sign setup executable!

Describe the solution you'd like
A better way to understand this field.
I tried with a path to signtool.exe but that also does not work.
Is there a prereqq config to find signtool.exe?

Describe alternatives you've considered
At the moment I have to use the CMD prompt

Additional context
The error messages are confusing as they seem to imply it did work (when it didn't)

[soner-boztas]

Hello,

signtool.exe must be available via the PATH environment variable, i.e. you must add the folder signtool.exe is located to your PATH environment variable.

[metkhoo]

Hi and thanks for the rapid response. Really appreciated.

Environment
signtool.exe is in my PATH environment variable and if I open a Command windows and just type in signtool it shows me the help text as I expected.

Works via CMD prompt
If I use signtool diretly from the command prompt then it does sign with my ssl.com signing certiicate.
i.e
Open CMD, paste in
signtool sign /fd sha256 /tr http://ts.ssl.com /td sha256 /sha1 {my_thumbprint_value} {filepath_to_my_exe}
it works

Issue in InstallForge
However, if i use the exact same command options in the "Code Signing" section and use an uninstaller I get the following:

The command that i put into the Code Signing section (obfuscated thumbprint of course)

sign /fd sha256 /tr http://ts.ssl.com /td sha256 /sha1 {my_thumbprint_value}

Perhaps you could shed some light on maybe why this does not work?

Thanks in advance

[soner-boztas]

What happens if you deactivate creating an uninstaller?

[metkhoo]

Hi again,

Yes, I did try that too
It seems to go through the entire process, then fails on the last step:

[soner-boztas]

Thanks. I guess I know now where the problem is:
sign /fd sha256 /tr http://ts.ssl.com/ /td sha256 /sha1 {my_thumbprint_value}

You shall not provide the "sign" command-line argument. This is provided implicitly by InstallForge.

[soner-boztas]

I see that this implicit passing of "sign" is quite confusing...

Should be changed for the next release.

[metkhoo]

Ahh yes! That worked

[soner-boztas]

Hello,

in the latest versions of InstallForge, a notice has been placed directly in the UI to avoid any confusion.