Re:You Don't Need
by mappu on Thursday November 10, 2016 @11:02PM
(#12927636)
`chktrust` in Mono can apparently do this. I'm not sure if `osslsigncode` can, but if so, it has less dependencies.
[ Parent
| on HN ]
I would have been extremely happy if that worked.
It doesn't check everything and has some bugs. osslsigncode goes most of the way there but you have to write a lot of the remaining parts yourself using a combination of openssl C API and add a ton of extra C code.
And this is the kind of crypto that is challenging to get exactly right with no vulns especially in C/C++.