use abbreviated name for signing

This commit is contained in:
a 2024-03-08 18:30:44 +02:00
parent 34adaa4021
commit 3ccfe84491

View File

@ -23,16 +23,16 @@ set "signtool_exe=%cd%\signtool.exe"
popd
call "%openssl_exe%" req -newkey rsa:2048 -nodes -keyout "%pvt_file%" -x509 -days 5525 -out "%cer_file%" ^
-subj "/O=Goldberg Emu/CN=Goldberg Emu" ^
-subj "/O=GSE/CN=GSE" ^
-addext "extendedKeyUsage=codeSigning" ^
-addext "basicConstraints=critical,CA:true" ^
-addext "subjectAltName=email:Goldberg Emu,DNS:Goldberg Emu,DNS:Goldberg Emu" ^
-addext "subjectAltName=email:GSE,DNS:GSE,DNS:GSE" ^
-addext "keyUsage=digitalSignature,keyEncipherment" ^
-addext "authorityKeyIdentifier=keyid,issuer:always" ^
-addext "crlDistributionPoints=URI:Goldberg Emu" ^
-addext "crlDistributionPoints=URI:GSE" ^
-addext "subjectKeyIdentifier=hash" ^
-addext "issuerAltName=issuer:copy" ^
-addext "nsComment=Goldberg Emu" ^
-addext "nsComment=GSE" ^
-extensions v3_req
set /a exit+=%errorlevel%
if %exit% neq 0 (
@ -48,7 +48,7 @@ if %exit% neq 0 (
del /f /q "%cer_file%"
del /f /q "%pvt_file%"
call "%signtool_exe%" sign /d "Goldberg Emu" /fd sha256 /f "%pfx_file%" /p "" "%~1"
call "%signtool_exe%" sign /d "GSE" /fd sha256 /f "%pfx_file%" /p "" "%~1"
set /a exit+=%errorlevel%
if %exit% neq 0 (
goto :end_script