Revert "Revert "Fix signature verification" (#4333" (#4345

* Revert "Revert "Fix signature verification" (#4333"

This reverts commit b9dfa22788.

* Update verify-sign.ps1
This commit is contained in:
Jakub Jareš 2023-03-20 09:37:42 +01:00 коммит произвёл GitHub
Родитель b9dfa22788
Коммит 2d656fe213
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
1 изменённых файлов: 4 добавлений и 0 удалений

Просмотреть файл

@ -60,6 +60,10 @@ function Verify-Assemblies
elseif ($signature.SignerCertificate.Subject -eq "CN=Microsoft 3rd Party Application Component, O=Microsoft Corporation, L=Redmond, S=Washington, C=US") {
Write-Debug "Valid ($($signature.SignerCertificate.Thumbprint)): $Path [3rd Party]"
}
elseif ($signature.SignerCertificate.Subject -eq "CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US") {
# We see this on server only, review what is the actual signature on the dlls we ship.
Write-Debug "Valid ($($signature.SignerCertificate.Thumbprint)): $Path [???]"
}
else {
# For legacy components, sign certificate is always "prod" signature. Skip such binaries.
if ($signature.SignerCertificate.Thumbprint -eq "98ED99A67886D020C564923B7DF25E9AC019DF26") {