From a0916b926f3db36dccb3b2ce07eb6dd2e6b04909 Mon Sep 17 00:00:00 2001 From: Adam Ierymenko Date: Wed, 22 Jan 2014 22:11:22 -0800 Subject: Finally got the Windows x64 driver signed correctly. Turns out signtool.exe with the older (NDIS5) version of the Windows DDK does not understand cross-certificates, yet it blithely continues on and signs incorrectly anyway. Got it working by using DigiCert's own certificate tool which includes a sign files operation. Must be done manually but this doesn't have to be done often. F@!K. --- windows/TapDriver/TapDriver.vcxproj | 57 +++++++++++++++++++++++++++++------- windows/TapDriver/testcert.pfx | Bin 2651 -> 0 bytes 2 files changed, 46 insertions(+), 11 deletions(-) delete mode 100644 windows/TapDriver/testcert.pfx (limited to 'windows/TapDriver') diff --git a/windows/TapDriver/TapDriver.vcxproj b/windows/TapDriver/TapDriver.vcxproj index ec1d9c45..79d9c773 100644 --- a/windows/TapDriver/TapDriver.vcxproj +++ b/windows/TapDriver/TapDriver.vcxproj @@ -163,35 +163,46 @@ http://timestamp.digicert.com/ - ztTap100 + zttap200 $(SolutionDir)\Build\$(Platform)\$(ConfigurationName)\ - http://timestamp.digicert.com/ + + + true - ztTap100 + zttap200 $(SolutionDir)\Build\$(Platform)\$(ConfigurationName)\ - http://timestamp.digicert.com/ + + + true zttap200 $(SolutionDir)\Build\$(Platform)\$(ConfigurationName)\ - http://timestamp.digicert.com/ + + true - ztTap100 + zttap200 $(SolutionDir)\Build\$(Platform)\$(ConfigurationName)\ - http://timestamp.digicert.com/ + + + true - ztTap100 + zttap200 $(SolutionDir)\Build\$(Platform)\$(ConfigurationName)\ - http://timestamp.digicert.com/ + + + true - ztTap100 + zttap200 $(SolutionDir)\Build\$(Platform)\$(ConfigurationName)\ - http://timestamp.digicert.com/ + + + true @@ -265,6 +276,30 @@ C:\WinDDK\7600.16385.1\lib\wnet\amd64\ndis.lib;C:\WinDDK\7600.16385.1\lib\wnet\amd64\ntstrsafe.lib;%(AdditionalDependencies) + + SHA1 + /t "http://timestamp.digicert.com/" /d "ZeroTier One Virtual Network Port" /sha1 5809bb3255b4f32dd93619c1cf26a7df6c282a89 + + + SHA1 + /t "http://timestamp.digicert.com/" /d "ZeroTier One Virtual Network Port" /sha1 5809bb3255b4f32dd93619c1cf26a7df6c282a89 + + + SHA1 + /t "http://timestamp.digicert.com/" /d "ZeroTier One Virtual Network Port" /sha1 5809bb3255b4f32dd93619c1cf26a7df6c282a89 + + + SHA1 + /t "http://timestamp.digicert.com/" /d "ZeroTier One Virtual Network Port" /sha1 5809bb3255b4f32dd93619c1cf26a7df6c282a89 + + + SHA1 + /t "http://timestamp.digicert.com/" /d "ZeroTier One Virtual Network Port" /sha1 5809bb3255b4f32dd93619c1cf26a7df6c282a89 + + + SHA1 + /t "http://timestamp.digicert.com/" /d "ZeroTier One Virtual Network Port" /sha1 5809bb3255b4f32dd93619c1cf26a7df6c282a89 + diff --git a/windows/TapDriver/testcert.pfx b/windows/TapDriver/testcert.pfx deleted file mode 100644 index 74f6b471..00000000 Binary files a/windows/TapDriver/testcert.pfx and /dev/null differ -- cgit v1.2.3