Self-sign your compiled executable from the commandline

[pervect66]

I've been using this procedure for a while now to sign my work-related tool, so Windows Defender will give me a little less grief.

First, create a self-signed certificate from PowerShell:

$cert = New-SelfSignedCertificate -DnsName www.yourwebsitename.com -Type CodeSigning -CertStoreLocation Cert:\CurrentUser\My
$CertPassword = ConvertTo-SecureString -String "Your_Password" -Force –AsPlainText
Export-PfxCertificate -Cert "cert:\CurrentUser\My\$($cert.Thumbprint)" -FilePath "C:\temp\Your_Cert_Name.pfx" -Password $CertPassword

Replace the bold text by your own preferred values:

Install Windows Linux Subsystem (WSL) in Windows 10/11: open an administrator Command Prompt or Powershell Window, and type: wsl --install

Start wsl, and first update linux from the command line:

sudo apt update
sudo apt upgrade -y

Then install osslsigncode

sudo apt install osslsigncode

Then you can sign your executable from Windows by executing:

wsl -e osslsigncode sign -pkcs12 "/mnt/c/temp/Your_Cert_Name.pfx" -pass "Your_Password" -n "My app name" -i "https://www.yourwebsitename.com" -t "http://timestamp.comodoca.com/authenticode" -in "/mnt/c/temp/MyUnSignedApp.exe" -out "/mnt/c/temp/MySignedApp.exe"

image.png (57.69 KiB) Viewed 2585 times

image.png (18.67 KiB) Viewed 2585 times

I use a batch file to first compile to MyUnSignedApp.exe, then run the above command to create the signed .exe.

I borrowed and stole parts from various people, and found other bits on the web.
Thanks to @hasantr for his tutorial, I just replaced the DigiCert part by wsl because I can script that

[robodesign]

Hello!
This is very good. Thank you very much for this.

Would the signing prevent virus warnings on other systems /PCs?

Can you please link to hasantr tutorial?

Best regards, Marius.