From 7d40cc9291a816fb62f9f7880a7dcf8fee0a23d9 Mon Sep 17 00:00:00 2001 From: Owen Rudge Date: Tue, 9 Nov 2021 14:05:11 +0000 Subject: [PATCH] Change: Explicitly specify SHA1 for legacy code signing on Windows --- os/windows/sign.bat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/os/windows/sign.bat b/os/windows/sign.bat index 0e4291f9b8..3954d4618c 100644 --- a/os/windows/sign.bat +++ b/os/windows/sign.bat @@ -12,7 +12,7 @@ REM URL of the timestamp server IF NOT DEFINED SIGNTOOL_TIMESTAMP_URL (SET SIGNTOOL_TIMESTAMP_URL=http://timestamp.digicert.com) REM Sign with SHA-1 for Windows 7 and below -"%SIGNTOOL_PATH%" sign -v -n %2 -t %SIGNTOOL_TIMESTAMP_URL% %1 +"%SIGNTOOL_PATH%" sign -v -n %2 -t %SIGNTOOL_TIMESTAMP_URL% -fd sha1 %1 REM Sign with SHA-256 for Windows 8 and above "%SIGNTOOL_PATH%" sign -v -n %2 -tr %SIGNTOOL_TIMESTAMP_URL% -fd sha256 -td sha256 -as %1