From 21587034d0f5ae308826b0d97d33d96148bb815e Mon Sep 17 00:00:00 2001
From: Mounir IDRASSI <mounir.idrassi@idrix.fr>
Date: Wed, 19 Dec 2018 23:33:05 +0100
Subject: [PATCH] Windows: update signing script to use newly issued IDRIX EV
 code signing certificate.

---
 .../GlobalSign_SHA256_EV_CodeSigning_CA.cer   | Bin 1155 -> 1195 bytes
 src/Signing/sign.bat                          |   6 +++---
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/Signing/GlobalSign_SHA256_EV_CodeSigning_CA.cer b/src/Signing/GlobalSign_SHA256_EV_CodeSigning_CA.cer
index 6cdc7000cbc4eeef3c0854a36bfa15c24b4dc806..3b9017365a96c5837bd6455ab179009078f93155 100644
GIT binary patch
delta 768
zcmV+b1ONPk39AVmFoFc9FoFY*paTK{0s;<58)^rsLQEd2{`1Z850M&T6*e$7F*PtS
zFfcGMS{Ds6G%z+XH87EpbpbPz2LT~}*|)kSt(5ayzCi{YQ_2hwj8Q>ZGkIk6SDob5
zCB*Ddgjkqzc|hVXc+`^WCJvsim3;fe{c%Lyj9<4Si(b3*{7cItJ;Qbb_0fz)ym56M
zi_(dSzT;6n#>k4YF*OHnx%Ikg4fGJ7uGL~mD0}Qzx~npLv3=5_Rt7fiu<y`+YOd<5
zAJz?@e3tvIaG5P#mGFSjc}DD2I?U5J`veE52X%si;Lv_|xR2}7DEzK%6lg(zc0<=l
zx?n`%w{qyv@E`+w+S;@Rb;q&;-uRTpXpdfdo|~OE;Lg%(#>Q*u6e6{8ezuQVAKT|{
z^g<AjXyz+L5KnWuEZ4;`YI5B^V{-xn0RRD`f&pVNf&pJJ4h92N9S;Ek{{#dB0s#gv
z9R>qc9VG-7Fcby|D+U1t1qTBI1_&z#0R;sI0|}Ew0v{CIELbcmZ#6BSd6lS0UBqoZ
zQ@^>BP6Hy7`T{_c!U8BgV{dIQa&K>REpjt1V{&XTVg>_M9Uuf-Fj+7Q1_>($0R#b{
zG64cG2L=UafeZlyFhK?hD+U1s0iZGgUz3XhH-8NV2`Yw2hW8Bt0Sg5H1A+ko0Cow)
z%rDvR9!shCSMxwQA<9fV9iAyGAk-^F(umF)4F%7GfxGKzyfKX`#K%O;U|^IS&!OQ0
zBo3`xzAVBg9%r}cC?7IW<2mz~-?*PHiz>8x3In{oHUy8!(40@B0w<ZU@I~n~-{d-@
zw|@pV*l#L%kkr&pSaIxAsbQG+IceY$oL5+Kh9@bd9py6fE18#Czbmjjv<B)9WbC)i
zWq>3X!r3?Vu_h2TM|+wAx>TY?lmB_Y8jQuCwV&U3=W9^$N0ezxB)HlI=nS1t2JA{P
yAbw9>hJ-IQqs^SbgjXLQt-#`>vF|BsAr+UV)c)-QH?aKmjVip{goESW!{=YIpg}1B

delta 728
zcmV;}0w?{e34;k5FoFbsFoFYTpaTK{0s;#J000000WpcjP2rIpVihqkI509XFfcGM
zFj^N4F*z_eFfuWblyw0zlL`SLf19=+e-~A(HCC#mv;K<EI+UJi?Hs7J|2L#r%hG`5
z|1R4Zj%3j5sudn(t%kXD>}0y01^VBZehUk=Vr%sfowF07`nc84;hrStTmcB<w5+N!
zNq`D=d*#s{`0?deEUOrwZ#PEWDNWzn;hjN7LcCMruSTd0Z}7TNp{T3-e;vy6KsRPJ
zy}qFM3rSP)M+HXj1$UR1^^pIsPcT#)N&DL|rwEBUyp76mJmyqn_gS<{+O(IAsHhCi
z)>V4M+SEb-ML&}dWQ{%exe|B02#T?)wh{rzNZ#q>3gsq?&I#G#->WMe7CqkXF+xh{
zoe1=aQ}4-gr~0FY6RF|UAI8@L0|5X5qk;iGFoFR(Fb)O-RUHoj0sjO90|EgClV<`S
zCknhIEG+k&<)4*&t-ICm7*RQeZZJm%163U$1VAu8FgykXRUIGzlVJllll%fG4{l|2
zFLG~hbS-i-E@N_Rle+>z6cYvmRUIV+3@{1?2rC8w1qBBK1CyEpB7Y4A2`Yw2hW8Bt
z0Sg5H1A+ko0IH!8m;baQ=<@^Y(~j>_p<IJCW99$xLbro8#*_6>UYm&_=vY%2h&21%
zN#P>u4~nrONGTcIF8L#9Sb-E(EhM=qXn0esa{bHkic_H4$PjOdI3sSmnelUw+ws4E
zqppof6}*jz{aGFU6MwE$!={(b0Bb!#NRSl;<fIq_)YqxwsX(@DA*|DW9Ohm01hI?S
z4A`pcxi(RM7dnkMD95+BagY+mY;3fIJMpDQ+{B|hEM4jdgT&)G5ag>NWeP%8*s^H$
zljR=bg8{1xhO*D4N;jmk+-%o^F^xZv=CLXTaEbgN9iJ-q%oW{}wO0-6Km!8M1W$zR
K@N$3$l@b&^n>^M4

diff --git a/src/Signing/sign.bat b/src/Signing/sign.bat
index e7af75d7..1c3bd2af 100644
--- a/src/Signing/sign.bat
+++ b/src/Signing/sign.bat
@@ -13,8 +13,8 @@ signtool sign /v /a /n IDRIX /i Thawte /ac thawte_Primary_MS_Cross_Cert.cer /fd
 signtool sign /v /a /n IDRIX /i Thawte /ac Thawt_CodeSigning_CA.crt /fd sha1 /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\VeraCrypt.exe" "..\Release\Setup Files\VeraCrypt Format.exe" "..\Release\Setup Files\VeraCryptExpander.exe" "..\Release\Setup Files\VeraCrypt-x64.exe" "..\Release\Setup Files\VeraCrypt Format-x64.exe" "..\Release\Setup Files\VeraCryptExpander-x64.exe"
 
 rem sign using SHA-256
-signtool sign /v /a /n "IDRIX SARL" /i GlobalSign /ac GlobalSign_Root_CA_MS_Cross_Cert.crt /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 "..\Release\Setup Files\veracrypt.sys" "..\Release\Setup Files\veracrypt-x64.sys"
-signtool sign /v /a /n "IDRIX SARL" /i GlobalSign /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 "..\Release\Setup Files\VeraCrypt.exe" "..\Release\Setup Files\VeraCrypt Format.exe" "..\Release\Setup Files\VeraCryptExpander.exe" "..\Release\Setup Files\VeraCrypt-x64.exe" "..\Release\Setup Files\VeraCrypt Format-x64.exe" "..\Release\Setup Files\VeraCryptExpander-x64.exe"
+signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_Root_CA_MS_Cross_Cert.crt /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 "..\Release\Setup Files\veracrypt.sys" "..\Release\Setup Files\veracrypt-x64.sys"
+signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 "..\Release\Setup Files\VeraCrypt.exe" "..\Release\Setup Files\VeraCrypt Format.exe" "..\Release\Setup Files\VeraCryptExpander.exe" "..\Release\Setup Files\VeraCrypt-x64.exe" "..\Release\Setup Files\VeraCrypt Format-x64.exe" "..\Release\Setup Files\VeraCryptExpander-x64.exe"
 
 
 cd "..\Release\Setup Files\"
@@ -58,6 +58,6 @@ cd %SIGNINGPATH%
 rem sign using SHA-1
 signtool sign /v /a /n IDRIX /i Thawte /ac Thawt_CodeSigning_CA.crt /fd sha1 /t http://timestamp.verisign.com/scripts/timestamp.dll "..\Release\Setup Files\VeraCrypt Setup %VC_VERSION%.exe" "..\Release\Setup Files\VeraCrypt Portable %VC_VERSION%.exe"
 rem sign using SHA-256
-signtool sign /v /a /n "IDRIX SARL" /i GlobalSign /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 "..\Release\Setup Files\VeraCrypt Setup %VC_VERSION%.exe" "..\Release\Setup Files\VeraCrypt Portable %VC_VERSION%.exe"
+signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /as /fd sha256 /tr http://timestamp.globalsign.com/?signature=sha2 /td SHA256 "..\Release\Setup Files\VeraCrypt Setup %VC_VERSION%.exe" "..\Release\Setup Files\VeraCrypt Portable %VC_VERSION%.exe"
 
 pause