[vlc-commits] Win32: dual sign with SHA-1 and SHA-2 for Authenticode

[Jean-Baptiste Kempf]

vlc/vlc-2.2 | branch: master | Jean-Baptiste Kempf <jb at videolan.org> | Tue Mar  7 11:50:53 2017 +0100| [4446db0b8bf3f4ab07004981e941cf9a4ab40b1a] | committer: Jean-Baptiste Kempf

Win32: dual sign with SHA-1 and SHA-2 for Authenticode

Requires osslsigncode 1.7.x

(cherry picked from commit 0c3f88a47d4f77941349db16346419b5cc635e25)
Signed-off-by: Jean-Baptiste Kempf <jb at videolan.org>

> http://git.videolan.org/gitweb.cgi/vlc/vlc-2.2.git/?a=commit;h=4446db0b8bf3f4ab07004981e941cf9a4ab40b1a
---

 extras/package/win32/package.mak | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/extras/package/win32/package.mak b/extras/package/win32/package.mak
index 4fee23c..bc62a09 100644
--- a/extras/package/win32/package.mak
+++ b/extras/package/win32/package.mak
@@ -93,7 +93,8 @@ package-win-strip: package-win-common package-win-npapi
 	if test -n "$(SIGNATURE)"; then \
 	  cd $(win32_destdir); find . -type f \( -name '*$(LIBEXT)' -or -name '*$(EXEEXT)' \) | while read i; \
 	  do if test -n "$$i" ; then \
-	    osslsigncode sign -certs $(SIGNATURE)/cert.cer -key $(SIGNATURE)/videolan.key -n "VLC media player" -i http://www.videolan.org/ -t http://timestamp.verisign.com/scripts/timstamp.dll -in "$$i" -out "$$i.sign"; \
+	    osslsigncode sign -certs $(SIGNATURE)/cert.cer -key $(SIGNATURE)/videolan.key -n "VLC media player" -i http://www.videolan.org/ -t http://timestamp.verisign.com/scripts/timstamp.dll -h sha1 -in "$$i" -out "$$i.sign"; \
+	    osslsigncode sign -certs $(SIGNATURE)/cert.cer -key $(SIGNATURE)/videolan.key -n "VLC media player" -i http://www.videolan.org/ -t http://timestamp.verisign.com/scripts/timstamp.dll -nest -h sha2 -in "$$i" -out "$$i.sign"; \
 	    mv "$$i.sign" "$$i" ; \
 	  fi ; \
 	  done \