Alternative timestamping services for Authenticode

by

I use the following batch file which loops a max of 300 times. There are two arguments, %1 is the path to a folder containing the batch file, pfx file and signtool.exe. %2 is the full path to the file being signed. You can call this in your visual studio post build event with something like call “$(SolutionDir)thirdparty\signing\sign.bat” “$(SolutionDir)thirdparty\signing” “$(TargetPath)”
I have modified this batch file to use different timestamp servers in each iteration. Currently it uses Comodo, Verisign, GlobalSign and Starfield. Hopefully this is The Ultimate Signing Script 😉

@echo off    

REM create an array of timestamp servers...
set SERVERLIST=(http://timestamp.comodoca.com/authenticode http://timestamp.verisign.com/scripts/timestamp.dll http://timestamp.globalsign.com/scripts/timestamp.dll http://tsa.starfieldtech.com)

REM sign the file...
%1\signtool.exe sign /f %1\comodo.pfx /p videodigital %2

set timestampErrors=0

for /L %%a in (1,1,300) do (

    for %%s in %SERVERLIST% do (

        REM try to timestamp the file. This operation is unreliable and may need to be repeated...
        %1\signtool.exe timestamp /t %%s %2

        REM check the return value of the timestamping operation and retry a max of ten times...
        if ERRORLEVEL 0 if not ERRORLEVEL 1 GOTO succeeded

        echo Signing failed. Probably cannot find the timestamp server at %%s
        set /a timestampErrors+=1
    )

    REM wait 2 seconds...
    choice /N /T:2 /D:Y >NUL
)

REM return an error code...
echo sign.bat exit code is 1. There were %timestampErrors% timestamping errors.
exit /b 1

:succeeded
REM return a successful code...
echo sign.bat exit code is 0. There were %timestampErrors% timestamping errors.
exit /b 0

I also put http://timestamp.comodoca.com into the trusted sites (thanks Vince). I think that may be an important step. I updated the root certificates on the PC too.

More Related Contents:

  1. How do you get a timestamp in JavaScript?
  2. PHP: producing relative date/time from timestamps
  3. Xcode 7 error: “Missing iOS Distribution signing identity for …”
  4. Getting date format m-d-Y H:i:s.u from milliseconds
  5. Pandas Timedelta in Days
  6. Creation timestamp and last update timestamp with Hibernate and MySQL
  7. Convert datetime to Unix timestamp and convert it back in python
  8. How to use the Firebase server timestamp to generate date created?
  9. Xcode error: Code signing is required for product type ‘Application’ in SDK ‘iOS 10.0’
  10. How to get timestamp of tick precision in .NET / C#?
  11. “User interaction is not allowed” trying to sign an OSX app using codesign
  12. Understanding keystore, certificates and alias
  13. How can I get millisecond and microsecond-resolution timestamps in Python?
  14. What is a Unix timestamp and why use it?
  15. Timestamp convert [duplicate]
  16. Extract date (yyyy/mm/dd) from a timestamp in PostgreSQL
  17. How to get current timestamp in milliseconds since 1970 just the way Java gets
  18. Codesign of Dropbox API fails in Xcode 4.6.3: “code object is not signed at all”
  19. Android/Firebase – Error while parsing timestamp in GCM event – Null timestamp
  20. ‘0000-00-00 00:00:00’ can not be represented as java.sql.Timestamp error
  21. How can I keep the original file [commit] timestamp on Subversion?
  22. How to fix Xcode 6.1 error while building IPA
  23. How to find difference b/w TIMESTAMP format values in Oracle?
  24. Difference between timestamps with/without time zone in PostgreSQL
  25. The executable gets signed with invalid entitlements in Xcode
  26. Time series plot gets offset by 2 hours if scale_x_datetime is used
  27. How to have an automatic timestamp in SQLite?
  28. Setting a JPA timestamp column to be generated by the database?
  29. Invalid Signature (Invalid Binary) on iTunes Connect
  30. Plotting time on the independent axis

Leave a Comment