Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Authenticode sign the PowerShell scripts and assemblies #501

Closed
ferventcoder opened this issue Dec 7, 2015 · 3 comments
Closed

Authenticode sign the PowerShell scripts and assemblies #501

ferventcoder opened this issue Dec 7, 2015 · 3 comments
Assignees
@ferventcoder
Labels
5 - Released Improvement Priority_HIGH Security
Milestone
0.9.10

Comments

@ferventcoder
Copy link
Member

One of the things we'll want to do for added security and for companies that need all scripts signed is to sign the PowerShell scripts.

https://groups.google.com/d/msgid/chocolatey/a476ca1e-85b0-4c53-816e-5621ef22ca9e%40googlegroups.com
@ferventcoder ferventcoder self-assigned this Dec 7, 2015
@ferventcoder ferventcoder added this to the 0.9.10 milestone Dec 7, 2015
@lboening
Copy link

👍 Yes, this is irritating.

@ferventcoder
Copy link
Member Author

Related https://github.com/chocolatey/chocolatey.org/issues/374

@ferventcoder ferventcoder changed the title Sign the powershell scripts Sign the powershell scripts and assemblies Mar 25, 2016
ferventcoder added a commit that referenced this issue Mar 25, 2016
@ferventcoder
(GH-501) Sign Assemblies/PowerShell Files
6171ccf 
To provide trust and more security in choco, signing the assemblies
is a very important aspect. Sign assemblies and PowerShell files
during the build process just before packaging the files into
the Chocolatey package.

 - Sign all assemblies - choco.exe, chocolatey.dll and the shims.
 - Sign all the PowerShell files.
ferventcoder added a commit that referenced this issue Mar 25, 2016
@ferventcoder
Merge branch 'stable'
ee0254a 
* stable:
  (doc) update changelog/nuspec
  (GH-501) Sign Assemblies/PowerShell Files
  (build) formatting
  (build) fix windows powershell path
  (doc) add example gifs
  (GH-670) Search enhancements
  (GH-668) Search should sort by version desc
  (GH-412) Allow filtering subcommands by match
@ferventcoder
Copy link
Member Author

This is shipping in the latest beta for 0.9.10 in a few minutes

ferventcoder added a commit that referenced this issue Mar 25, 2016
@ferventcoder
(GH-501) build fixes
593db2b
ferventcoder added a commit that referenced this issue Mar 25, 2016
@ferventcoder
Merge branch 'stable'
76f47ef 
* stable:
  (GH-501) build fixes
ferventcoder added a commit to ferventcoder/choco that referenced this issue Mar 25, 2016
@ferventcoder
(chocolateyGH-501) sudo fix the build
201a866
ferventcoder added a commit to ferventcoder/choco that referenced this issue Mar 25, 2016
@ferventcoder
Merge branch 'stable'
329c797 
* stable:
  (chocolateyGH-501) sudo fix the build
ferventcoder added a commit to ferventcoder/choco that referenced this issue Apr 9, 2016
@ferventcoder
(chocolateyGH-501) allow shutting off sign when no network
3f99bcf 
When there is no network available shutting off code signing should be
available.
ferventcoder added a commit to ferventcoder/choco that referenced this issue Apr 9, 2016
@ferventcoder
Merge branch 'pr613-new' into stable
3d67a72 
* pr613-new:
  (chocolateyGH-501) allow shutting off sign when no network
  (chocolateyGH-448) Add Output Directory for choco new
ferventcoder added a commit to ferventcoder/choco that referenced this issue Apr 9, 2016
@ferventcoder
Merge branch 'stable'
8a436eb 
* stable:
  (chocolateyGH-501) allow shutting off sign when no network
  (chocolateyGH-448) Add Output Directory for choco new
  (maint) assume xml file is utf8
  (maint) formatting
  (chocolateyGH-258) Switch for only using silent args provided
  (chocolateyGH-682) Add summary log file
  (chocolateyGH-644) Add info command
  (chocolateyGH-646) Add detail/detailed for search/list
  (maint) template share location should be appropriate
  (build) add a run.codesign switch
@ferventcoder ferventcoder changed the title Sign the powershell scripts and assemblies Sign the PowerShell scripts and assemblies with a code certificate Apr 13, 2016
@ferventcoder ferventcoder changed the title Sign the PowerShell scripts and assemblies with a code certificate Authenticode sign the PowerShell scripts and assemblies Apr 15, 2016
@ferventcoder ferventcoder mentioned this issue Mar 28, 2017
Closed
@gep13 gep13 removed the 4 - Done label Sep 7, 2021
@ferventcoder ferventcoder mentioned this issue Aug 28, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ferventcoder ferventcoder

Labels
5 - Released Improvement Priority_HIGH Security
Projects
None yet
Milestone
0.9.10
Development

No branches or pull requests
3 participants
@ferventcoder @lboening @gep13