diff options
| author | kali kaneko (leap communications) <kali kaneko (leap communications)> | 2020-05-02 13:52:04 +0200 |
|---|---|---|
| committer | kali kaneko (leap communications) <kali kaneko (leap communications)> | 2020-05-02 13:52:04 +0200 |
| commit | 25da627b2f580c73830441bc15f02a5ebad52091 (patch) | |
| tree | fda099d0124fc8fb75cdbff318c6ab8774d63c5f | |
| parent | 318e1690e85da5d645ea665fb5c0fb73976631c6 (diff) | |
add script to convert windows certs
| -rw-r--r-- | windoze/README.md | 10 | ||||
| -rwxr-xr-x | windoze/convert.sh | 6 |
2 files changed, 16 insertions, 0 deletions
diff --git a/windoze/README.md b/windoze/README.md new file mode 100644 index 0000000..9b752fb --- /dev/null +++ b/windoze/README.md @@ -0,0 +1,10 @@ +signing +======= + +For signing windows installers from the host machine, we use osslsigncode: + + https://github.com/mtrojnar/osslsigncode + +Some hints about converting certificates and keys: + + https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/Build_Instructions/Signing_an_executable_with_Authenticode diff --git a/windoze/convert.sh b/windoze/convert.sh new file mode 100755 index 0000000..20c7053 --- /dev/null +++ b/windoze/convert.sh @@ -0,0 +1,6 @@ +#!/bin/sh +openssl pkcs12 -in win.pfx -nocerts -nodes -out key.pem && awk 'NR>2' key.pem > key.plain.pem +echo "[+] Encrypting key.pem..." +openssl rsa -aes256 -in key.plain.pem -out key.pem && shred -u key.plain.pem +openssl pkcs12 -in win.pfx -out win.crt -nokeys -clcerts +openssl x509 -inform pem -in win.crt -outform der -out win.cer |