[BUG] Signing fails with error

[MTRNord]

ℹ️ Info

Version: 0.1.8

💬 Description

The signing fails with:

getting config values..  [√]
validate config values..  [√]
create icons folder..  [√]
copy icons..  [√]
create manifest file..  [√]
copy VCLibs files..  [√]
packing..  [√]
singing..  Error information: "Error: Store::ImportCertObject() failed." (-2146893808/0x80090010)

SignTool Error: An unexpected internal error has occurred.

📜 Pubspec.yaml

msix_config:
  display_name: Famedly
  publisher_display_name: Famedly
  identity_name: com.famedly.chat
  msix_version: 0.28.1.0  
  publisher: CN=Famedly GmbH
  certificate_path: ./code-signing-famedly.pfx
  certificate_password: placeholder
  capabilities: 'internetClient,location,microphone,webcam,chat,picturesLibrary,videosLibrary,documentsLibrary'

[YehudaKremer]

Hey @MTRNord

its looks like an internal error of the SignTool

let's check if there a problem with the certificate file,
please import and then export your certificate file as .PFX with the tool certificate-utility-for-windows
as shown here https://www.advancedinstaller.com/forums/viewtopic.php?t=35282

[MTRNord]

That tool seems to not work on linux with wine for me. But i can inspect that cert with openssl pkcs12 -info -in <cert file path> just fine. However another one in our company tried the tool on windows and it was possible to import and export the certificate. Even after that we get the same signtool error.

[MTRNord]

Found the issue :) The publisher field not only needs CN but ALL fields in the CORRECT order. ^^ Now it works

[YehudaKremer]

I'm glad you found the problem well done!
Can you please give me an example of valid publisher to put in the documentation

[MTRNord]

Our publisher now is publisher: 'CN=Famedly GmbH, O=Famedly GmbH, L=Berlin, S=Berlin, C=DE' but it is depending on the certificate. Basicly all the fields in the subject part of the certificate. And in the order top to bottom in that.

[YehudaKremer]

thank you Marcel,
i added this example here

[portlek]

power shell requires
I found the subject of my certificate to run Get-PfxCertificate then it will ask your .pfx file path;

just give the .pfx file path then enter, don't fill the FilePath[1]: enter again, it will ask your certificate password, type it, that's it.

[feemagdev]

pf

Thanks i got the subject and put it in publisher. works like charm.

[acamenhas]

@feemagdev I'm having this problem too.. what tags in publisher (and in what order) that you have putted?