GoogleCloudPlatform / GoogleCloudPlatform/kms-integrations

SignTool: Selecting a certificate from the store does not work

Open
#59 1 comment 0 reactions 0 assignees View on GitHub
feature request needs further investigation
Dominant language
C++
Stars
47
Forks
24
PR merge metrics
No merged PRs in 30d

Description

Selecting a certificate from the store does not work while specifying it from the local disk with the `/f` parameter works fine.

NOK
---

```signtool sign /d MD /fd sha256 /tr http://timestamp.acs.microsoft.com /td SHA256 /a /sm /csp "Google Cloud KMS Provider" /kc projects/myProjectId/locations/europe/keyRings/code-signing/cryptoKeys/mykey/cryptoKeyVersions/1 /sha1 2daafb27143ab86e26afcdec3da086b8b0dedf2d /v binary.exe```

```
The following certificate was selected:
Issued to: MyCompany
Issued by: Sectigo Public Code Signing CA R36
Expires: Fri Nov 06 00:59:59 2026
SHA1 hash: 2DAAFB27143AB86E26AFCDEC3DA086B8B0DEDF2D

SignTool Error: An unexpected internal error has occurred.
Error information: "Could not associate private key with certificate." (-2147024891/0x80070005)
```

OK
---

```signtool sign /d MD /fd sha256 /tr http://timestamp.acs.microsoft.com /td SHA256 /a /f mycert.crt /csp "Google Cloud KMS Provider" /kc projects/myProjectId/locations/europe/keyRings/code-signing/cryptoKeys/mykey/cryptoKeyVersions/1 binary.exe```

Any ideas?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.