Re: [tracecompass-dev] tracecompass.exe authenticode signature

[Jonah Graham <jonah@xxxxxxxxxxxxxxxx>]

Hi Stefan

Thank you for raising this issue. The signature is indeed incorrect due to an error in the build script that does not resign the file. For more details and to track progress of the fix, please have a look at https://bugs.eclipse.org/bugs/show_bug.cgi?id=581528

> Any good reason the authenticode signature on tracecompass.exe is broken? tracecompassc.exe is ok. Looked at 2 different versions (8.1 and 8.2) and 2 different mirrors.

The reason, beyond the build script error, is that tracecompass.exe is renamed from eclipse.exe with the icons updated. That changes the checksum/hash so the signature fails.

Thanks

Jonah

~~~
Jonah Graham (he/him)
Kichwa Coders
www.kichwacoders.com

On Tue, 14 Feb 2023 at 10:07, Stefan Pedersen <stefan.pedersen@xxxxxxxxx> wrote:

Hi.

Asked this question on IRC but got no response:

Any good reason the authenticode signature on tracecompass.exe is broken? tracecompassc.exe is ok. Looked at 2 different versions (8.1 and 8.2) and 2 different mirrors.

---

PS C:\Users\nnn> Get-AuthenticodeSignature C:\Users\nnn\Desktop\trace-compass\tracecompass.exe | Format-List


SignerCertificate      : [Subject]
                           E=webmaster@xxxxxxxxxxx, CN="Eclipse.org Foundation, Inc.", OU=IT, O="Eclipse.org Foundation
                         , Inc.", L=Ottawa, S=Ontario, C=CA

                         [Issuer]
                           CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US

                         [Serial Number]
                           0DF7A7C90906301AD2F0C24D3377187B

                         [Not Before]
                           2022-05-02 02:00:00

                         [Not After]
                           2024-05-22 01:59:59

                         [Thumbprint]
                           774C1140C441DD2FE2AF7E57865A384D9C47E35E

TimeStamperCertificate : [Subject]
                           CN="Sectigo RSA Time Stamping Signer #3", O=Sectigo Limited, S=Manchester, C=GB

                         [Issuer]
                           CN=Sectigo RSA Time Stamping CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB

                         [Serial Number]
                           0090397F9AD24A3A13F2BD915F0838A943

                         [Not Before]
                           2022-05-11 02:00:00

                         [Not After]
                           2033-08-11 01:59:59

                         [Thumbprint]
                           AB34013AAC4097319F081AF0B318E183F80F7881

Status                 : HashMismatch
StatusMessage          : The contents of file C:\Users\stefan\Desktop\trace-compass\tracecompass.exe might have been ch
                         anged by an unauthorized user or process, because the hash of the file does not match the hash
                          stored in the digital signature. The script cannot run on the specified system. For more info
                         rmation, run Get-Help about_Signing.
Path                   : C:\Users\stefan\Desktop\trace-compass\tracecompass.exe
SignatureType          : Authenticode
IsOSBinary             : False

Regards,

Stefan

_______________________________________________
tracecompass-dev mailing list
tracecompass-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/tracecompass-dev