KarpelesLab / authenticode / 25972557430

83%

push

github

SignerInfo attribute parity with osslsigncode; DLL fixture

The SignerInfo signed-attrs set now matches what osslsigncode emits:

  - Add the PKCS#9 signingTime attribute (UTCTime, 1.2.840.113549.1.9.5).
    Defaults to time.Now(); override via SignOptions.SigningTime for
    reproducible signing.
  - Drop the unconditional empty SpcSpOpusInfo. SpcSpOpusInfo is now
    emitted only when SignOptions.ProgramName or SignOptions.ProgramURL
    is set, mirroring signtool's "/d <name>" / "/du <url>" and
    osslsigncode's "-n <name>" / "-i <url>". Empty fields → attribute
    omitted entirely.

Adds testdata/hello.dll (a PE32+ DLL built via x86_64-w64-mingw32-gcc)
and TestSignDLLOsslsigncode to confirm the PE path is format-neutral
between .exe and .dll.

Verified against http://timestamp.digicert.com:

  Authenticated attributes:
    Signing time: <time>
    Microsoft Individual Code Signing purpose
    Message digest: <hex>
  Signature verification: ok

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

40 of 46 new or added lines in 2 files covered. (86.96%)

511 of 615 relevant lines covered (83.09%)

3189.69 hits per line