summaryrefslogtreecommitdiffstats
path: root/Tools
diff options
context:
space:
mode:
authorSteve Dower <steve.dower@microsoft.com>2018-12-21 21:48:18 (GMT)
committerGitHub <noreply@github.com>2018-12-21 21:48:18 (GMT)
commitd3bbc5241363d5fa4e749fe509c97c12501ae966 (patch)
tree1dc4f8616fdf20d98269baa7922a7621ef4fc093 /Tools
parentf0af4c54e32d963e1ccbac005bcbcab1913e051f (diff)
downloadcpython-d3bbc5241363d5fa4e749fe509c97c12501ae966.zip
cpython-d3bbc5241363d5fa4e749fe509c97c12501ae966.tar.gz
cpython-d3bbc5241363d5fa4e749fe509c97c12501ae966.tar.bz2
Enable signing Windows builds with SHA1 environment variable (GH-11279)
Diffstat (limited to 'Tools')
-rw-r--r--Tools/msi/sdktools.psm15
1 files changed, 4 insertions, 1 deletions
diff --git a/Tools/msi/sdktools.psm1 b/Tools/msi/sdktools.psm1
index 81a74d3..61edb34 100644
--- a/Tools/msi/sdktools.psm1
+++ b/Tools/msi/sdktools.psm1
@@ -21,6 +21,9 @@ function Sign-File {
$description = "Python";
}
}
+ if (-not $certsha1) {
+ $certsha1 = $env:SigningCertificateSha1;
+ }
if (-not $certname) {
$certname = $env:SigningCertificate;
}
@@ -32,7 +35,7 @@ function Sign-File {
if ($certsha1) {
SignTool sign /sha1 $certsha1 /fd sha256 /t http://timestamp.verisign.com/scripts/timestamp.dll /d $description $a
} elseif ($certname) {
- SignTool sign /n $certname /fd sha256 /t http://timestamp.verisign.com/scripts/timestamp.dll /d $description $a
+ SignTool sign /a /n $certname /fd sha256 /t http://timestamp.verisign.com/scripts/timestamp.dll /d $description $a
} elseif ($certfile) {
SignTool sign /f $certfile /fd sha256 /t http://timestamp.verisign.com/scripts/timestamp.dll /d $description $a
} else {