Sign appx bundle is not working with EV certificate #717

Closed
opened 2026-01-29 16:46:38 +00:00 by claunia · 2 comments
Owner

Originally created by @delasource on GitHub (Oct 29, 2021).

Originally assigned to: @GregorBiswanger on GitHub.

  • Version: ElectronNET.CLI Version: 13.5.1.0
  • Target: net5.0 (win-x64 / appx)
  • My OS: Windows 11
  • I have an EV certificate (on hardware token) by Digicert

Signing in the process of dotnet electronize build /target win (as 'nsis' target) is no problem. But when the build.win.target is defined as "appx" then the signing failes:

Exit code: 1. Command failed: C:\Users\user\AppData\Local\electron-builder\Cache\winCodeSign\winCodeSign-2.6.0\windows-10\x64\signtool.exe sign /tr http://timestamp.digicert.com /sha1 SOMEHASHHERE /s My /fd sha256 /td sha256 /d PROJECTNAME /du https://github.com/ElectronNET/Electron.NET#readme /debug C:\PROJECTPATH\bin\Desktop\PROJECT 7.0.3.appx
SignTool Error: Multiple signature support is not implemented for this filetype.
SignTool Error: An error occurred while attempting to sign: C:\PROJECTPATH\bin\Desktop\PROJECT 7.0.3.appx

[followed by a list of all installed certs]

After EKU filter, 6 certs were left.
After expiry filter, 6 certs were left.
After Hash filter, 1 certs were left.
After Private Key filter, 1 certs were left.
The following certificate was selected:
Issued to: XXXXXXXX
Issued by: DigiCert EV Code Signing CA (SHA2)
Expires: Thu Feb 24 01:59:59 2022
SHA1 hash: SOMEHASH
Done Adding Additional Store

Number of files successfully Signed: 0
Number of warnings: 0
Number of errors: 1

An appx file is created but running/installation is not possible as it is not signed.

Originally created by @delasource on GitHub (Oct 29, 2021). Originally assigned to: @GregorBiswanger on GitHub. * **Version**: ElectronNET.CLI Version: 13.5.1.0 * **Target**: net5.0 (win-x64 / appx) * My OS: Windows 11 * I have an EV certificate (on hardware token) by Digicert Signing in the process of `dotnet electronize build /target win` (as 'nsis' target) is no problem. But when the build.win.target is defined as "appx" then the signing failes: ``` Exit code: 1. Command failed: C:\Users\user\AppData\Local\electron-builder\Cache\winCodeSign\winCodeSign-2.6.0\windows-10\x64\signtool.exe sign /tr http://timestamp.digicert.com /sha1 SOMEHASHHERE /s My /fd sha256 /td sha256 /d PROJECTNAME /du https://github.com/ElectronNET/Electron.NET#readme /debug C:\PROJECTPATH\bin\Desktop\PROJECT 7.0.3.appx SignTool Error: Multiple signature support is not implemented for this filetype. SignTool Error: An error occurred while attempting to sign: C:\PROJECTPATH\bin\Desktop\PROJECT 7.0.3.appx [followed by a list of all installed certs] After EKU filter, 6 certs were left. After expiry filter, 6 certs were left. After Hash filter, 1 certs were left. After Private Key filter, 1 certs were left. The following certificate was selected: Issued to: XXXXXXXX Issued by: DigiCert EV Code Signing CA (SHA2) Expires: Thu Feb 24 01:59:59 2022 SHA1 hash: SOMEHASH Done Adding Additional Store Number of files successfully Signed: 0 Number of warnings: 0 Number of errors: 1 ``` An appx file is created but running/installation is not possible as it is not signed.
claunia added the bug label 2026-01-29 16:46:38 +00:00
Author
Owner

@michalzaq12 commented on GitHub (Oct 21, 2022):

https://github.com/electron-userland/electron-builder/issues/7203

@michalzaq12 commented on GitHub (Oct 21, 2022): https://github.com/electron-userland/electron-builder/issues/7203
Author
Owner

@GregorBiswanger commented on GitHub (Mar 28, 2023):

🎉🚀 New Electron.NET version 23.6.1 released 🚀🎉

With native Electron 23 and .NET 6 support. Your problem should be fixed here. If you continue to have the problem, please let us know. Please note the correct updating of your API & CLI. Info in the README. Have fun!

@GregorBiswanger commented on GitHub (Mar 28, 2023): 🎉🚀 New Electron.NET version 23.6.1 released 🚀🎉 With native Electron 23 and .NET 6 support. Your problem should be fixed here. If you continue to have the problem, please let us know. Please note the correct updating of your API & CLI. Info in the README. Have fun!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/Electron.NET#717