msys2 / msys2/msys2.github.io

Is It Possible to Sign Libraries (DLLs) from msys2 used in other Open Source/FOSS software to avoid Microsoft Code Integrity Blocking the DLLs?

Open
#380 11 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
CSS
Stars
3.3k
Forks
446
Avg merge
2h 16m
Merged PRs (30d)
1

Description

Microsoft Security is slowly but surely, as part of a long term plan, to require Developers to sign their software (executables, DLLs, etc) with Authenticode. Otherwise Microsoft Code Integrity will blocked unsigned DLLs used from third party projects - rendering the overall application broken or functionality broken.

Is it possible for me to apply Authenticode to DLLs from msys2 into my product so that my Open Source/FOSS software is not blocked by Microsoft Code Integrity on Windows?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are mentioned. Start by reviewing the MSYS2 project's guidance and the Windows Authenticode and Code Integrity requirements; done would be a documented, project-specific answer stating whether signing MSYS2 DLLs is supported and under what conditions.

Written by the indexing model from the issue text.

Assessment

Domain
operating-systems, security
Issue type
Documentation
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.