rufus/_sign.cmd

@echo off
"C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\signtool" sign /v /sha1 9ce9a71ccab3b38a74781b975f1c228222cf7d3b /fd SHA256 /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp %1
[core] update UEFI:NTFS to latest * Also update signing script 2016-02-05 10:29:14 +00:00			`@echo off`
[fido] add additional Authenticode validation before running the script * This basically means that the script is validate TWICE, using two completely independent signatures, before it is allowed to run, which should add another mitigation layer against TOCTOU (which we already friggin' mitigated against anyway) and other potential vectors of attack. * Also remove -DisableFirstRunCustomize option and the associated cookie prompt monitoring, which the latest version of Fido no longer requires. * Also update WDK version for signtool and flesh out PKI error messages. 2021-05-26 23:18:05 +00:00			`"C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\signtool" sign /v /sha1 9ce9a71ccab3b38a74781b975f1c228222cf7d3b /fd SHA256 /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp %1`