Skip to content

Commit 2877de7

Browse files
authored
sign native dll with correct cert (microsoft#21854)
### Description Fixed microsoft#21775 ### Motivation and Context The dlls should be signed with Keycode CP-230012. The default is the test code sign.
1 parent 983c4d5 commit 2877de7

File tree

1 file changed

+32
-0
lines changed

1 file changed

+32
-0
lines changed

tools/ci_build/github/azure-pipelines/templates/win-esrp-dll.yml

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,38 @@ steps:
2626
AuthAKVName: 'buildkeyvault'
2727
AuthCertName: '53d54d02-SSL-AutoRotate'
2828
AuthSignCertName: '53d54d02-978d-4305-8572-583cf6711c4f'
29+
signConfigType: inlineSignParams
30+
inlineOperation: |
31+
[
32+
{
33+
"keyCode": "CP-230012",
34+
"operationSetCode": "SigntoolSign",
35+
"parameters": [
36+
{
37+
"parameterName": "OpusName",
38+
"parameterValue": "Microsoft"
39+
},
40+
{
41+
"parameterName": "OpusInfo",
42+
"parameterValue": "http://www.microsoft.com"
43+
},
44+
{
45+
"parameterName": "PageHash",
46+
"parameterValue": "/NPH"
47+
},
48+
{
49+
"parameterName": "FileDigest",
50+
"parameterValue": "/fd sha256"
51+
},
52+
{
53+
"parameterName": "TimeStamp",
54+
"parameterValue": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
55+
}
56+
],
57+
"toolName": "signtool.exe",
58+
"toolVersion": "6.2.9304.0"
59+
}
60+
]
2961
3062
FolderPath: ${{ parameters.FolderPath }}
3163
Pattern: ${{ parameters.Pattern }}

0 commit comments

Comments
 (0)