This site is currently in read-only mode during migration to a new platform.
You cannot post questions, answers or comments, as they would be lost during the migration otherwise.
0 votes

I cannot sign a windows .exe on Mac OS (13.2.1) with osslsigncode. I was failing in the Godot Editor v4.0.1, so I decided to test on the command line. Using osslsigncode v2.3.0 and my mac's openssl -> LibreSSL v3.3.6.

I am not embedding the .pck with the the exported binary.

I have created a self-signed cert and .pfx file as follows:

Generate a private key for the CA

openssl genrsa -out ca.key 4096

GHenerate certificate

openssl req -config config.cnf -new -x509 -days 1826 -key ca.key -out ca.crt

Generate a private key for code signing

openssl genrsa -out codesign.key 4096

Generate a new certificate request (csr) with just a CN.

openssl req -config config.cnf -sha256 -new -key codesign.key -extensions v3_req -out codesign.csr

Create certificates based on the csr

openssl x509 -req -days 1826 -in codesign.csr -CA ca.crt -CAkey ca.key -extfile config.cnf -set_serial 01 -out codesign.crt

Export certificates based on the csr

openssl pkcs12 -export -out codesign.pfx -inkey codesign.key -in codesign.crt -passout pass:<password>

Verify the Password

openssl pkcs12 -in codesign.pfx -noout

Using this command to sign:

osslsigncode sign -pkcs12 codesign.pfx -pass "<password>" -t http://timestamp.digicert.com -in ConversionToollBugs.exe  -out Test.exe

Results in the following error and I am using the correct password:

Failed to parse PKCS#12 file: codesign.pfx (Wrong password?)
40818C0502000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
Failed

Any pointers as how to fix this? Thanks in advance!

Godot version 4.0
in Engine by (105 points)
reshown by

1 Answer

0 votes
Best answer

hmmm... don't use openssl that comes with MacOS... (expletive) Apple!

by (105 points)
selected by
Welcome to Godot Engine Q&A, where you can ask questions and receive answers from other members of the community.

Please make sure to read Frequently asked questions and How to use this Q&A? before posting your first questions.
Social login is currently unavailable. If you've previously logged in with a Facebook or GitHub account, use the I forgot my password link in the login box to set a password for your account. If you still can't access your account, send an email to [email protected] with your username.