A custom signtool.exe that is able to digitally sign EXE, DLL, OCX, and CAB files and also unsign them. Usage
Using a batch file. The following are some real examples of how you could use the application and also command line arguments documentation.
Command Line Arguments
sign: This activates the method of signing mode (if /sign and /unsign are both set, runs just /sign).
unsign: This activates the method of unsigning mode.
overwrite: If this is enabled, it will remove all current certificates of the library, else will append.
/f: Prints absolute path of the signed file.
-folder: The root folder path of it’s files and it’s subdirectories’ files are going to be signed.
-file: The file in particular that is going to be signed (if valid. If not it’ll show a warning).
/da: Digest algorithm. Can be SHA256, SHA512 or MD5.
+password: Password used for signing.
-certificate: The certificate can be *.pfx or *.cer.
-altcertificate: The alternative certificate. The certificate can only be *.cer.
-timestamp: The timestamp. (optional)
Note: If both folder and file are set, both are going to run, but first the folder one.
Examples
The example is placed in the same folder where Humanlights.SignTool.exe is which is accompanied by signtool.exe and the certificate. The SignTool is customizable and made user-friendly for quick usage, so you can sign all the files that a folder and it’s subfolders’ contains or just a file manually.
There’s plenty of testing *.bat files in Testing folder. Check them out if you’d like.
Signing
This signs a full folder and all it’s subdirectories’ files that have the extensions: *.exe, *.dll, *.ocx and *.cab forcedly! Without any timestamp!
Humanlights.SignTool.exe sign overwrite /f -folder "your/path"-certificate “certificate.pfx” -altcertificate “certificate.cer”
-password “1234”This signs a file only that has one of these extensions: *.exe, *.dll, *.ocx and *.cab forcedly! Without any timestamp!
Humanlights.SignTool.exe sign /f -file "your/path/app.exe"-certificate “certificate.pfx” -altcertificate “certificate.cer”
-password “1234”Other tests
Humanlights.SignTool.exe sign overwrite /f -file“your/path/app.exe” -certificate “certificate.cer” -timestamp
“http://timestamp.verisign.com/scripts/timstamp.dll”Humanlights.SignTool.exe sign /f -folder "your/path/"-certificate “certificate.cer” -timestamp
“http://timestamp.verisign.com/scripts/timstamp.dll”Unsigning
This unsigns a full folder and all it’s subdirectories’ files that have the extensions: *.exe, *.dll, *.ocx and *.cab.
Humanlights.SignTool.exe unsign -folder "your/path"This removes the signing of a file only that has one of these extensions: *.exe, *.dll, *.ocx and *.cab.
Humanlights.SignTool.exe unsign /f -file "your/path/app.exe"Notes
- Currently I’ve only tested with *.cer certificate files. If any trouble with using it, let me know.
- “signtool.exe” MUST BE in the same folder as Humanlights.SignTool.exe
License
See license (hint: MIT).
