starred/terminal
1
0
Fork 0
mirror of https://github.com/microsoft/terminal.git synced 2026-02-04 05:35:20 +00:00
Code Issues 19.0k Packages Projects Releases 20 Wiki Activity

Sigcheck unable to verify catalog signed status on OpenConsoleProxy.dll #17702

New Issue
Closed
opened 2026-01-31 05:50:48 +00:00 by claunia · 7 comments
claunia commented 2026-01-31 05:50:48 +00:00
Owner
Copy Link

Originally created by @joeltuckwell on GitHub (Jun 14, 2022).

I am opening this as a new issue as I haven't received a reply on issue #12695

I have run two versions of this file against sigcheck -a -i which should confirm the file is catalog signed as stated but it always returns unsigned. Can you please provide evidence that this file is catalog signed?

Windows Terminal version
1.12.10393.0
1.12.2204.8003

Windows build number
10.0.22000.0
21H2 22000.675

Other Software
No response

Steps to reproduce
View properties on files "C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.12.10393.0_x64__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy.dll"

"C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.12.10983.0_x64__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy"

Notice that Digital Signatures tab does not appear in the properties.

Virus total also confirms the file is not digitally signed:
https://www.virustotal.com/gui/file/320addd674045f097f85da27a88d0b0cf935adb8f1301b7af52c4c8f0a9145e5/details

https://www.virustotal.com/gui/file/3b627cff9f15797656d2b8744ea0a7e53b2583018b8234e1ce27ccc618a9f41a/details

Expected Behavior
File should be digitally signed like other official Microsoft files.

Actual Behavior
File is not digitally signed. This can cause the file to be blocked by application allow listing software.

I just wanted to jump on this issue @DHowett - I've run this file against sigcheck (with the flags to check catalog signing) and it's returning n/a for publisher. Are you seeing something different on your system? If so could you please provide what you are seeing on your system and the hash for the version of OpenConsoleProxy.dll that you are checking?

Thank you!

image

Originally posted by @joeltuckwell in https://github.com/microsoft/terminal/issues/12695#issuecomment-1135530989

Originally created by @joeltuckwell on GitHub (Jun 14, 2022). I am opening this as a new issue as I haven't received a reply on issue [#12695](https://github.com/microsoft/terminal/issues/12695) I have run two versions of this file against sigcheck -a -i which should confirm the file is catalog signed as stated but it always returns unsigned. Can you please provide evidence that this file is catalog signed? Windows Terminal version 1.12.10393.0 1.12.2204.8003 Windows build number 10.0.22000.0 21H2 22000.675 Other Software No response Steps to reproduce View properties on files "C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.12.10393.0_x64__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy.dll" "C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminal_1.12.10983.0_x64__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy" Notice that Digital Signatures tab does not appear in the properties. Virus total also confirms the file is not digitally signed: https://www.virustotal.com/gui/file/320addd674045f097f85da27a88d0b0cf935adb8f1301b7af52c4c8f0a9145e5/details https://www.virustotal.com/gui/file/3b627cff9f15797656d2b8744ea0a7e53b2583018b8234e1ce27ccc618a9f41a/details Expected Behavior File should be digitally signed like other official Microsoft files. Actual Behavior File is not digitally signed. This can cause the file to be blocked by application allow listing software. ------ I just wanted to jump on this issue @DHowett - I've run this file against sigcheck (with the flags to check catalog signing) and it's returning n/a for publisher. Are you seeing something different on your system? If so could you please provide what you are seeing on your system and the hash for the version of OpenConsoleProxy.dll that you are checking? Thank you! ![image](https://user-images.githubusercontent.com/15152712/169977992-790efe68-fd1b-4b36-b527-186ff9de2db8.png) _Originally posted by @joeltuckwell in https://github.com/microsoft/terminal/issues/12695#issuecomment-1135530989_
claunia added the Needs-TriageResolution-Fix-CommittedNeeds-Tag-Fix labels 2026-01-31 05:50:48 +00:00
claunia commented 2026-01-31 05:50:49 +00:00
Author
Owner
Copy Link

@joeltuckwell commented on GitHub (Jun 14, 2022):

Additional information:

image

@joeltuckwell commented on GitHub (Jun 14, 2022): Additional information: ![image](https://user-images.githubusercontent.com/15152712/173472494-b09350e0-f590-4783-bc75-a9d7c131e97b.png)
claunia commented 2026-01-31 05:50:49 +00:00
Author
Owner
Copy Link

@elsaco commented on GitHub (Jun 14, 2022):

@joeltuckwell if you check terminal's files they'll show as NotSigned. However, the MSIX packages are signed. Here's sample signature check for Terminal Preview 1.14.1451 bundle:

Get-AuthenticodeSignature .\Microsoft.WindowsTerminalPreview_Win10_1.14.1451.0_8wekyb3d8bbwe.msixbundle | fl

SignerCertificate      : [Subject]
                           CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

                         [Issuer]
                           CN=Microsoft Marketplace CA G 027, OU=EOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

                         [Serial Number]
                           3300168484221784EE03ECF7ED000000168484

                         [Not Before]
                           5/25/2022 2:05:16 PM

                         [Not After]
                           5/28/2022 2:05:16 PM

                         [Thumbprint]
                           8864EC39545C61DC3132393ECEC74A7010262406

TimeStamperCertificate : [Subject]
                           CN=Microsoft Time-Stamp Service, OU=Thales TSS ESN:4D2F-E3DD-BEEF, OU=Microsoft Operations Puerto Rico, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

                         [Issuer]
                           CN=Microsoft Time-Stamp PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

                         [Serial Number]
                           33000001B0A1E38332E88D3BC00001000001B0

                         [Not Before]
                           3/2/2022 10:51:42 AM

                         [Not After]
                           5/11/2023 11:51:42 AM

                         [Thumbprint]
                           029E2F90DDDF0F914D05561992565E4BF2453C18

Status                 : Valid
StatusMessage          : Signature verified.
Path                   : C:\Users\elsaco\Downloads\Microsoft.WindowsTerminalPreview_Win10_1.14.1451.0_8wekyb3d8bbwe.msixbundle
SignatureType          : Authenticode
IsOSBinary             : False

and openconsoleproxy.dll:

SignerCertificate      :
TimeStamperCertificate :
Status                 : NotSigned
StatusMessage          : The file C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminalPreview_1.14.1451.0_x6
                         4__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy.dll is not digitally signed. You cannot run this script on the
                         current system. For more information about running scripts and setting execution policy, see
                         about_Execution_Policies at https://go.microsoft.com/fwlink/?LinkID=135170
Path                   : C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminalPreview_1.14.1451.0_x64__8wekyb
                         3d8bbwe\PackagedCom\OpenConsoleProxy.dll
SignatureType          : None
IsOSBinary             : False
@elsaco commented on GitHub (Jun 14, 2022): @joeltuckwell if you check terminal's files they'll show as `NotSigned`. However, the MSIX packages are signed. Here's sample signature check for Terminal Preview 1.14.1451 bundle: ``` Get-AuthenticodeSignature .\Microsoft.WindowsTerminalPreview_Win10_1.14.1451.0_8wekyb3d8bbwe.msixbundle | fl SignerCertificate : [Subject] CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US [Issuer] CN=Microsoft Marketplace CA G 027, OU=EOC, O=Microsoft Corporation, L=Redmond, S=Washington, C=US [Serial Number] 3300168484221784EE03ECF7ED000000168484 [Not Before] 5/25/2022 2:05:16 PM [Not After] 5/28/2022 2:05:16 PM [Thumbprint] 8864EC39545C61DC3132393ECEC74A7010262406 TimeStamperCertificate : [Subject] CN=Microsoft Time-Stamp Service, OU=Thales TSS ESN:4D2F-E3DD-BEEF, OU=Microsoft Operations Puerto Rico, O=Microsoft Corporation, L=Redmond, S=Washington, C=US [Issuer] CN=Microsoft Time-Stamp PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US [Serial Number] 33000001B0A1E38332E88D3BC00001000001B0 [Not Before] 3/2/2022 10:51:42 AM [Not After] 5/11/2023 11:51:42 AM [Thumbprint] 029E2F90DDDF0F914D05561992565E4BF2453C18 Status : Valid StatusMessage : Signature verified. Path : C:\Users\elsaco\Downloads\Microsoft.WindowsTerminalPreview_Win10_1.14.1451.0_8wekyb3d8bbwe.msixbundle SignatureType : Authenticode IsOSBinary : False ``` and `openconsoleproxy.dll`: ``` SignerCertificate : TimeStamperCertificate : Status : NotSigned StatusMessage : The file C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminalPreview_1.14.1451.0_x6 4__8wekyb3d8bbwe\PackagedCom\OpenConsoleProxy.dll is not digitally signed. You cannot run this script on the current system. For more information about running scripts and setting execution policy, see about_Execution_Policies at https://go.microsoft.com/fwlink/?LinkID=135170 Path : C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsTerminalPreview_1.14.1451.0_x64__8wekyb 3d8bbwe\PackagedCom\OpenConsoleProxy.dll SignatureType : None IsOSBinary : False ```
claunia commented 2026-01-31 05:50:50 +00:00
Author
Owner
Copy Link

@joeltuckwell commented on GitHub (Jun 14, 2022):

Thank you for all this information. This allowed us to pinpoint an issue on our end. We do not look at the msixbundle files as a source of trust, rather the codeintegrity.cat digest to confirm the file is signed. However we were looking in Program Files for this file (for 3rd-party Windows Applications) and not ProgramData (for native applications), and thus missed this catalog.

I appreciate the reply and the information. I will close this case.

@joeltuckwell commented on GitHub (Jun 14, 2022): Thank you for all this information. This allowed us to pinpoint an issue on our end. We do not look at the msixbundle files as a source of trust, rather the codeintegrity.cat digest to confirm the file is signed. However we were looking in Program Files for this file (for 3rd-party Windows Applications) and not ProgramData (for native applications), and thus missed this catalog. I appreciate the reply and the information. I will close this case.
claunia commented 2026-01-31 05:50:50 +00:00
Author
Owner
Copy Link

@christophvw commented on GitHub (Nov 21, 2022):

Please sign the file properly. Otherwise it cannot be allowed in a secure way by AppLocker.

@christophvw commented on GitHub (Nov 21, 2022): Please sign the file properly. Otherwise it cannot be allowed in a secure way by AppLocker.
claunia commented 2026-01-31 05:50:50 +00:00
Author
Owner
Copy Link

@DHowett commented on GitHub (Jan 19, 2023):

Yeah, this is nuanced. We're just gonna sign the files. :)

@DHowett commented on GitHub (Jan 19, 2023): Yeah, this is nuanced. We're just gonna sign the files. :)
claunia commented 2026-01-31 05:50:50 +00:00
Author
Owner
Copy Link

@ghost commented on GitHub (Jan 24, 2023):

:tada:This issue was addressed in #14710, which has now been successfully released as Windows Terminal v1.16.1023 (10231 and 10232).🎉

Handy links:

@ghost commented on GitHub (Jan 24, 2023): :tada:This issue was addressed in #14710, which has now been successfully released as `Windows Terminal v1.16.1023 (10231 and 10232)`.:tada: Handy links: * [Release Notes](https://github.com/microsoft/terminal/releases/tag/v1.16.1023 (10231 and 10232)) * [Store Download](https://www.microsoft.com/store/apps/9n8g5rfz9xk3?cid=storebadge&ocid=badge)
claunia commented 2026-01-31 05:50:51 +00:00
Author
Owner
Copy Link

@ghost commented on GitHub (Jan 24, 2023):

:tada:This issue was addressed in #14710, which has now been successfully released as Windows Terminal Preview v1.17.1023.🎉

Handy links:

@ghost commented on GitHub (Jan 24, 2023): :tada:This issue was addressed in #14710, which has now been successfully released as `Windows Terminal Preview v1.17.1023`.:tada: Handy links: * [Release Notes](https://github.com/microsoft/terminal/releases/tag/v1.17.1023) * [Store Download](https://www.microsoft.com/store/apps/9n8g5rfz9xk3?cid=storebadge&ocid=badge)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
⛺ Reserved
A11yCO
A11yMAS
A11ySev1
A11ySev2
A11ySev3
A11yTTValidated
A11yUsable
A11yVoiceAccess
A11yWCAG
Area-Accessibility
Area-AtlasEngine
Area-AzureShell
Area-Build
Area-Build
Area-Chat
Area-CmdPal
Area-CodeHealth
Area-Commandline
Area-CookedRead
Area-DefApp
Area-Extensibility
Area-Fonts
Area-GroupPolicy
Area-i18n
Area-Input
Area-Interaction
Area-Interop
Area-Localization
Area-Output
Area-Performance
Area-Portable
Area-Quality
Area-Remoting
Area-Rendering
Area-Schema
Area-Server
Area-Settings
Area-SettingsUI
Area-ShellExtension
Area-ShellExtension
Area-ShellExtension
Area-Suggestions
Area-Suggestions
Area-TerminalConnection
Area-TerminalControl
Area-Theming
Area-UserInterface
Area-VT
Area-Windowing
Area-WPFControl
AutoMerge
Blocking-Ingestion
Culprit-Centennial
Culprit-WinUI
Disability-All
Disability-Blind
Disability-LowVision
Disability-Mobility
External-Blocked-WinUI3
Fixed
Gathering-Data
good first issue
HCL-E+D
HCL-WindowsTerminal
Help Wanted
Impact-Compatibility
Impact-Compliance
Impact-Correctness
Impact-Visual
In-PR
InclusionBacklog
InclusionBacklog-Windows TerminalWin32
InclusionCommitted-202206
Issue-Bug
Issue-Docs
Issue-Feature
Issue-Feature
Issue-Question
Issue-Samples
Issue-Scenario
Issue-Task
Needs-Attention
Needs-Author-Feedback
Needs-Bisect
Needs-Discussion
Needs-Repro
Needs-Tag-Fix
Needs-Tag-Fix
Needs-Triage
No-Recent-Activity
Priority-0
Priority-1
Priority-2
Priority-3
Product-Cmd.exe
Product-Colortool
Product-Colortool
Product-Colortool
Product-Conhost
Product-Conpty
Product-Meta
Product-Powershell
Product-Terminal
Product-WSL
pull-request
Mirrored from GitHub Pull Request
 Resolution-Answered
Resolution-By-Design
Resolution-Duplicate
Resolution-External
Resolution-Fix-Available
Resolution-Fix-Committed
Resolution-No-Repro
Resolution-Won't-Fix
Severity-Blocking
Severity-Crash
Severity-DataLoss
spam
this-will-be-a-breaking-change
Tracking-External
WindowsTerminal_Win32
Work-Item
zAskModeBug
zInbox-Bug
No Label Needs-Tag-Fix Needs-Triage Resolution-Fix-Committed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claunia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#17702
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?