Rainbow Digital Certificate Code Signing Tool

Rainbow Digital Signature ToolIt is a digital signature software specially made for software codes. The software has five signature hash algorithms, which can easily help users complete the signature work of the code. After completing the signature, the reputation of the software will be greatly improved, and it supports adding multiple timestamps.

Basic introduction

Since the code signing tool "signtool GUI" was developed in 2014, code signing tool software from various manufacturers has emerged one after another in the past two years. Each product has its own characteristics. The author's two software "signtool GUI" and "Rainbow Digital Certificate Code Signing Tool" have also been developed in parallel, each with its own focus on functions. In order to facilitate the majority of users, starting from version 3.0 of "Rainbow Digital Certificate Code Signing Tool", the two softwares have been merged, and "signtool GUI" has been integrated into the latter as a component of "Rainbow Digital Certificate Code Signing Tool".

The last publicly released independent version of "signtool GUI" V2.2, "Rainbow Digital Certificate Code Signing Tool" 3.0 integrates "signtool GUI" 3.0, and has made product optimization updates to the latter.

Function introduction

1. Documents to be signed

Generally, it is a PE file, but other files that support embedded signatures can also be used. The suffix names include: exe, msi, mui, msu, vbs, dll, ocx, sys, cab, stl, cat, xap, etc.

2. Key package file

PKCS#12 file, the suffix is generally: pfx, p12.

3. Key bag password

Please enter the correct password. If not, please leave it blank.

4. Cross certificate

For driver file code signing, please select the appropriate Microsoft cross-certificate.

5. The paths of files to be signed, key package files, and cross certificates can be automatically obtained by dragging files.

Software features

1. Support dual Authenticode timestamps on the same file;

2. Tolerate the error of selecting a mismatched cross-certificate;

3. Support dual signature of MSI format files;

4. Supports five hash algorithms: md5 / sha1 / sha256 / sha384 / sha512;

5. Supports the use of RFC3161 timestamps under old systems such as Windows XP / Vista / 7 (without KB2949927 and subsequent replacement patches installed);

6. Support dual signatures under old systems such as Windows XP / Vista / 7 (KB2949927 and subsequent replacement patches are not installed);

7. Support the use of key package files that are not within the validity period.

Change log

New features of Rainbow Digital Certificate Code Signing Tool 3.0:

1. Symantec RFC3161 timestamp SHA1 and SHA256 are one each (*);

2. Support SHA2 hash algorithm timestamp (*);

3. SHA2 hash algorithm timestamp: GlobalSign and COMODO (one each (*);

4. Code signature and timestamp signature results are displayed (*);

5. Signature fault-tolerant design (*);

6. Random skin change;

Rainbow Digital Certificate Code Signing Tool 3.0 improved features:

1. Configuration saving is migrated from file to registry;

2. Batch signatures are changed from synchronous signatures to sequential signatures to coordinate the situation where some timestamp services are not suitable for high concurrency (*);

3. Update the StartCom SHA2 hash algorithm timestamp (*);

4. Windows 7 deploys SHA2 hash algorithm timestamp optimization (*);

5. Replace signtool.exe with the latest version 10.0.14393.33 (*);

6. Remove the built-in Microsoft cross-signing certificate and change it to the Microsoft official website resource download link (*);

(*Updates for signtool GUI module)