-
Type: Improvement
-
Resolution: Duplicate
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: manual
-
Labels:None
-
Environment:Windows
Include steps to verify the digital signature of MSI packages on our verification page
https://docs.mongodb.com/manual/tutorial/verify-mongodb-packages/
C:\Program Files\Microsoft SDKs\Windows\v7.1\Bin>signtool.exe verify /pa /v c:\users\Administrator\Downloads\mongodb-win32-x86_64-enterprise-windows-64-3.4.9-signed.msi Verifying: c:\users\Administrator\Downloads\mongodb-win32-x86_64-enterprise-windows-64-3.4.9-signed.msi Hash of file (sha256): 8F5BD0CE2E5184AE4D8099C5F2AD02E5E22AD4A7DDFD70430905771C8629A7E1 Signing Certificate Chain: Issued to: thawte Primary Root CA Issued by: thawte Primary Root CA Expires: Wed Jul 16 23:59:59 2036 SHA1 hash: 91C6D6EE3E8AC86384E548C299295C756C817B81 Issued to: thawte SHA256 Code Signing CA Issued by: thawte Primary Root CA Expires: Sat Dec 09 23:59:59 2023 SHA1 hash: D00CFDBF46C98A838BC10DC4E097AE0152C461BC Issued to: MongoDB, Inc. Issued by: thawte SHA256 Code Signing CA Expires: Tue Dec 19 23:59:59 2017 SHA1 hash: 89C9D1B561E652583ED50516A0124B3D474D3FD3 File is not timestamped. Successfully verified: c:\users\Administrator\Downloads\mongodb-win32-x86_64-enterprise-windows-64-3.4.9-signed.msi Number of files successfully Verified: 1 Number of warnings: 0 Number of errors: 0
Microsoft's reference for SignTool: https://msdn.microsoft.com/en-us/library/windows/desktop/aa387764(v=vs.85).aspx
Requires the tools portion of the SDK.
- duplicates
-
DOCS-10909 Add steps to verify Windows signed MSI package
- Closed