-
Notifications
You must be signed in to change notification settings - Fork 29
Description
I am using an EV Code signing certificate that only exists in a Yubikey, so there's no .pfx file so I can't use vsixsigntool. This tool almost works, but it crashes with the stack dump. I've also included the offending command line
d:\oldeskuul\tools\visualstudio\glsl\bin>OpenVsixSignTool sign --sha1 [redacted] --timestamp http://ts.ssl.com -ta sha256 -fd sha256 glsl-vs2022.vsix
Unhandled Exception: System.AggregateException: One or more errors occurred. (The algorithm specified is not supported.) ---> System.NotSupportedException: The algorithm specified is not supported.
at OpenVsixSignTool.Core.SignatureAlgorithmTranslator.SignatureAlgorithmToXmlDSigUri(SigningAlgorithm signatureAlgorithm, HashAlgorithmName hashAlgorithmName) in D:\a\1\s\src\OpenVsixSignTool.Core\SignatureAlgorithmTranslator.cs:line 32
at OpenVsixSignTool.Core.XmlSignatureBuilder.BuildSignedInfoElement(ValueTuple4[] objects) in D:\a\1\s\src\OpenVsixSignTool.Core\XmlSignatureBuilder.cs:line 97 at OpenVsixSignTool.Core.XmlSignatureBuilder.Build() in D:\a\1\s\src\OpenVsixSignTool.Core\XmlSignatureBuilder.cs:line 48 at OpenVsixSignTool.Core.OpcPackageSignatureBuilder.Sign(SignConfigurationSet configuration) in D:\a\1\s\src\OpenVsixSignTool.Core\OpcPackageSignatureBuilder.cs:line 57 at OpenVsixSignTool.SignCommand.PerformSignOnVsixAsync(String vsixPath, Boolean force, Uri timestampUri, HashAlgorithmName fileDigestAlgorithm, HashAlgorithmName timestampDigestAlgorithm, X509Certificate2 certificate, AsymmetricAlgorithm signingKey) in D:\a\1\s\src\OpenVsixSignTool\SignCommand.cs:line 241 --- End of inner exception stack trace --- at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification)
at Microsoft.Extensions.CommandLineUtils.CommandLineApplication.Execute(String[] args)
at OpenVsixSignTool.Program.Main(String[] args) in D:\a\1\s\src\OpenVsixSignTool\Program.cs:line 61
FYI, signtool works just fine with MSI files.