electron / electron/forge

Update Docs for cloud-based EV code signing

Open
#3,617 5 comments 4 reactions 0 assignees View on GitHub
code-signing documentation platform/windows
Dominant language
TypeScript
Stars
7.1k
Forks
641
Avg merge
3d 1h
Merged PRs (30d)
30

Description

### Pre-flight checklist

- [X] I have read the [contribution documentation](https://github.com/electron/forge/blob/main/CONTRIBUTING.md) for this project.
- [X] I agree to follow the [code of conduct](https://github.com/electron/electron/blob/main/CODE_OF_CONDUCT.md) that this project uses.
- [X] I have searched the issue tracker for a feature request that matches the one I want to file, without success.

### Problem description

The docs haven't been updated for a year now regarding windows code signing, electron's own [docs](https://www.electronjs.org/docs/latest/tutorial/code-signing#signing-windows-builds) have however and make reference to `windowsSign` in forge, but I would love to have examples of how to use `windowsSign` on forge in combination with `MakerSquirrel`, as I seem unable to get it working with ssl.com's cloud signing after several months of stumbling in and out of trying 🤡

### Proposed solution

Update the docs with examples for;
- [Certum EV code signing certificate](https://shop.certum.eu/data-safety/code-signing-certificates/certum-ev-code-sigining.html)
- [DigiCert EV code signing certificate](https://www.digicert.com/signing/code-signing-certificates)
- [Entrust EV code signing certificate](https://www.entrustdatacard.com/products/digital-signing-certificates/code-signing-certificates)
- [GlobalSign EV code signing certificate](https://www.globalsign.com/en/code-signing-certificate/ev-code-signing-certificates)
- [IdenTrust EV code signing certificate](https://www.identrust.com/digital-certificates/trustid-ev-code-signing)
- [Sectigo (formerly Comodo) EV code signing certificate](https://sectigo.com/ssl-certificates-tls/code-signing)
- [SSL.com EV code signing certificate](https://www.ssl.com/certificates/ev-code-signing/)

### Alternatives considered

I tried [Electron Forge SSL Code Sign Plugin](https://github.com/Burzo/electron-forge-ssl-code-sign-plugin) but it runs too late and doesn't update the RELEASES file, meaning no updates are installed on Windows due to a checksum mismatch.

### Additional information

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.