docs - adding authenticode notes https://github.com/Ylianst/MeshCentral/commit/c5315ba0fcdb7bdf19484331aec1db46a02edadc
silversword411 committed
Aug 10, 2022 at 14:05 UTC
b349c599fea6e4cedafde78c036b3c202b2f8396
1 file changed
+32
-24
docs/docs/meshcentral/codesigning.md
+32
-24
@@ -20,34 +20,42 @@ Usage:
20
node authenticode.js [command] [options]
21
Commands:
22
info: Show information about an executable.
23
- --exe [file] Required executable to view information.
24
- --json Show information in JSON format.
23
+ --exe [file] Required executable to view information.
24
+ --json Show information in JSON format.
25
sign: Sign an executable.
26
- --exe [file] Required executable to sign.
27
- --out [file] Resulting signed executable.
28
- --pem [pemfile] Certificate & private key to sign the executable with.
29
- --desc [description] Description string to embbed into signature.
30
- --url [url] URL to embbed into signature.
31
- --hash [method] Default is SHA384, possible value: MD5, SHA224, SHA256, SHA384 or SHA512.
32
- --time [url] The time signing server URL.
33
- --proxy [url] The HTTP proxy to use to contact the time signing server, must start with http://
26
+ --exe [file] Required executable to sign.
27
+ --out [file] Resulting signed executable.
28
+ --pem [pemfile] Certificate & private key to sign the executable with.
29
+ --desc [description] Description string to embbed into signature.
30
+ --url [url] URL to embbed into signature.
31
+ --hash [method] Default is SHA384, possible value: MD5, SHA224, SHA256, SHA384 or SHA512.
32
+ --time [url] The time signing server URL.
33
+ --proxy [url] The HTTP proxy to use to contact the time signing server, must start with http://
34
unsign: Remove the signature from the executable.
35
- --exe [file] Required executable to un-sign.
36
- --out [file] Resulting executable with signature removed.
35
+ --exe [file] Required executable to un-sign.
36
+ --out [file] Resulting executable with signature removed.
37
createcert: Create a code signging self-signed certificate and key.
38
- --out [pemfile] Required certificate file to create.
39
- --cn [value] Required certificate common name.
40
- --country [value] Certificate country name.
41
- --state [value] Certificate state name.
42
- --locality [value] Certificate locality name.
43
- --org [value] Certificate organization name.
44
- --ou [value] Certificate organization unit name.
45
- --serial [value] Certificate serial number.
38
+ --out [pemfile] Required certificate file to create.
39
+ --cn [value] Required certificate common name.
40
+ --country [value] Certificate country name.
41
+ --state [value] Certificate state name.
42
+ --locality [value] Certificate locality name.
43
+ --org [value] Certificate organization name.
44
+ --ou [value] Certificate organization unit name.
45
+ --serial [value] Certificate serial number.
46
timestamp: Add a signed timestamp to an already signed executable.
47
- --exe [file] Required executable to sign.
48
- --out [file] Resulting signed executable.
49
- --time [url] The time signing server URL.
50
- --proxy [url] The HTTP proxy to use to contact the time signing server, must start with http://
47
+ --exe [file] Required executable to sign.
48
+ --out [file] Resulting signed executable.
49
+ --time [url] The time signing server URL.
50
+ --proxy [url] The HTTP proxy to use to contact the time signing server, must start with http://
51
+ icons: Show the icon resources in the executable.
52
+ --exe [file] Input executable.
53
+ saveicons: Save an icon group to a .ico file.
54
+ --exe [file] Input executable.
55
+ --out [file] Resulting .ico file.
56
+ --icongroup [groupNumber] Icon groupnumber to save to file.
57
+ --removeicongroup [number]
58
+ --icon [groupNumber],[filename.ico]
59
60
Note that certificate PEM files must first have the signing certificate,
61
followed by all certificates that form the trust chain.