From 320bead09f5e4d7ce0ec1fd0b5b64010e37920e5 Mon Sep 17 00:00:00 2001
From: Mounir IDRASSI <mounir.idrassi@idrix.fr>
Date: Mon, 23 Aug 2021 00:03:21 +0200
Subject: [PATCH] Windows: Update signing script to use newly issued IDRIX EV
 code signing certificate (22-08-2021)

---
 .../GlobalSign_SHA256_EV_CodeSigning_CA.cer   | Bin 1195 -> 1772 bytes
 src/Signing/sign.bat                          |   6 +++---
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/Signing/GlobalSign_SHA256_EV_CodeSigning_CA.cer b/src/Signing/GlobalSign_SHA256_EV_CodeSigning_CA.cer
index 3b9017365a96c5837bd6455ab179009078f93155..21d4951b21a0c047879917e64634c5ae2ccb7c17 100644
GIT binary patch
literal 1772
zcma)+dpJ~i7{}+FIYw^77}p9zOzS$oW;E`lMn&nygKFFHj7cJ6m>D}oEE7X)YRP50
zk!x0^TuX^slBrNGsjSLMQ)CjNVt3E9*~hc(AA9~e&-=c=_w#*!=Xt*eh;ULMLOSxW
zFa*OI!g{<y?RJ$KgLN!#!<CV5fErH8LhLS{QiC8B1q|?BrUI03SRVvOgjcUwrVn)G
zfih8JT_`tz73v)v6h;dB-kQ%^W)7ChOIRXlUWvio6-bgF3Jwb*d2zV{l9%mrV5qA`
z1;CDK4?aITbk%6{L$LFIi=vpnMa}1lu46FdGNd)WB)R^aJYyA!3eW}-Y%>3rkOBrP
zg4Ho-UKtj_5atd^mTh<iqB8QnElpW6OJZKI*G!dIb^W=jccD+0zIW|xf$qyFhn<a6
zZG?gkMQ@;w)pZ%N@{GRefl7VPgBRDkZ9(=WXoM8@WF1Y5pFU7VsV?xNJ=hj~49`(7
z`iX2&d2loDQcCo$^p3YxKK@xMgcrxFtttrZW{YCBTILve6!=dQPcOfWg&!9ZDT(W4
zO_Xr_jjp>i&5?T7%ua%2=w7A5$=lw;UJv(qZiUiC{lsy_G(lZLT<(KHZM?L6c<Rvm
zrx9=OUoWXxMI%Mtz1022KvBPGm@Ir(#?j62D6Jj(_2|i4mq+flMjvN3H=Aa#xv?6l
zto9tA0@M6t`nwOg*E4J?aJl40RmfNKc|}St-motx)u#RNz#-dWBXZu^3;Q@DXOgv@
zZ@wO_?LE&bDi5dU?@#Mf<2Q~CT9q9e*@knVyZ1Qlkeaj!@a0xx+K=y7WlGO=dvIQq
z|8`<8oAg~;tWyP}H^A}Oi+fc$m3I23nmm3Pa#5)-aj44#k-1tJ*l=2cJHu+BP_<{-
zB|1ao)Z{6wo7g`f$g{e{?yOHAmi}W{JBLml!ymcm64CgaS|S>(p~6&fpgQBW@vL+5
zP%wLXG_p1IW|^$carPCnp@uMa{jH0Hx*{y5Up@9jW|L;p%Y~OWjauD!dL~e6da%{v
z=Ij-37z<&b0ugi`h@et{NB7G>9fJNu5Y#bZK$OR3h$>LVEwIEv3JQu?EYOrEiSk1W
z01kbjTLcW`IXt3+XqlbrnAxr*W;c(FUm`mBEykwP3BX8RUV`WWoj5HcOvBnZ<(YjB
zwMA8oN4{IGwq-ei_>4IL2twk;ApRh5n9Bf2Y`sSy2zR7VxNLs7P0(jE@=>4Ju(=!x
z8{K+&fSQhndX9%$ZtXv<u-NfSD?gAO$qW3dnZ*v|3I2m&!{!OVD*4z(h$FBE^gP=<
zsu+BMv3a3ik-i!OMT7z$If8_20-h*M3H^o$lt+bNU<;^oL&A^_S<dC77ZeJG{|55{
z!@2xm0hhO*0u*ryLGh{(cD|+29~WwA2xAtRr_}0DS9`|c5JfMytY_F@gY?(|HN`zA
z7N3$u)aZung*R8O6t79T8+gL=_iZ@XWOp|UZe}0p${(v?nyCo0Ufqjur6rq>jE?7X
zu5GMdf!ol^r%4uQS-W^jFV;mC3#<#bIffEFri-+dwXzZ~h3v64TV0;zJE8H>G-k|_
zcSGm--r=FroR$?kCOY&^%?h%`!nGDIOJcs^r(BR(E;`;2>RqCB+Bqqrk(qY;Q>R5b
z?X}-VrXo{vL+@O?^+My1VeQ$h=%*1;juQ4%H*m9~{&AI&*jG1GETQRJ3OP^iD7=mJ
zkF?3JX;}UXo!#2D>rws8HLGzCU(9Vy%UesY+Limsn%WJ`n<fUV+bme^es3m~T?Z!h
zdJJD3rARuH{4-MA7ZMC!*d^xL><&22jNg=b&c~0@=bdU6>&#M5QK_3;S^O|<3h`wc
zU(J0O5)s#s)z8EB_L^9ZFV)#>FWu^@dLdnQ-6du!?v^LrFCnueLE9bRy_POGoR(j2
z(xTs5EWw|RqCW|#WBC(IGYbdO_KfP6di>1nsIsl^`QX~3k-f~zVYxXW$+WZSQz`q7
z(7pR(z>MiLBx+N~U|4_KY5OhY3FC;she~E$t%{ha%Pr$VX>-?rPe-TW`yadpJPuzW
a@KlrC$h6&%+tWcB-nc*Dkh|jJ$-e+tOv1_l

literal 1195
zcmXqLVp(p`#N5AtnTe5!iO)kii+!b&kKC$%pU-~eH{fOC)N1o+`_9YA$j!=N;A5y@
zAjifW%EB!y?w*sMl$aBonVzQ*l%HRs;OwZNs}N*tC~P1IQo$w6g-`(#WJVS=kQ3)M
zG&3+WG&KN&C~;mR6C|!do*}mZC&(-|VJ0V6LrDX1h`|B~gB9}1bc+)WT@0K+Qq02E
zNK&p9C8>ESsVNF!i8+}mi6xo&c?!<?DXAbQXXd3t931T7Xk=;zbh*2+K@+1AvWFR2
z8JL?G`5A!XTue=jj0`uo?^0bm<#Y5tM>d(@Q#=AafsT>Jl__7s=RUcrdgM(&OT>(#
zN{2`K6;~#`QsbMqZfec%BYz8B?)JoQSMHA6{pFAMX=U5PWz1hM_PFjTES2rP)Y-Z3
zaiHz76J47OP1*Bye%+PD`$b^>x~oZ^8r5&Ycda(6*;spNQ5c)qyAAIzWUYI(TK*dE
z{F-UM*A~pwjh*_T;X<X`n^3DWmo0v?u&-b*ZEAXOp{{&K|LaQ{f7a!SWH{EBIbZkK
zmEiJld(n#v9~79YZ{6C$R(gCB^SvKaj%D=6RnMC}*X+T$OWDVcWxo_r+FDq*tv^cs
z_Vc_iP687$o@u)Z_!sZexqj3ztLScWF%vT*1LNW*#$;fK#2fGdLtK`hk?}tZ3oz-h
z8OVb8sw`p#B5WMmY>cd|?99w?7N>y_NLm=AoWp<(NHH-oK(z3&h_Q&=(TUK}$~V=W
zUpaM!N9>VYyWssh4dg*ulvyMU#2Q5UKX})#&~sH;=Ns@Vc~<wmM|Y+77}&wgXJlkC
z0;VB77~g=gO(~<Kq`*pFKR>y+z(_A0oLGy2F|U`LpQ~R4Ot3}924)}&<XQ9$bPco@
zXf9B1Q-x|uF3Q2CMYqUU4=81j1k$I#5^WG^z|F=9^ehYG0wYEy19mpn^hO>=W&=lr
zXuN@mff3AIOpIb`AS;T24l6G&$FL){Aip@XB)_OqA2}fca~?1uGBT8L9yz0b^Szw+
z${*pM9V``3`Pj(L)6`bDqV002<D3*P>-px!-LEtE81`x%Iqq^MAz_Nl`GpUeRQT3L
z@6$P?E|<Rjg@(LQ;A6|rGw$!0uh*@$rJ9R*&t5Z@{*xEx_%CKspSj_K>r0dSPplSi
zXEVQ%uT?qW$`!we!Z*Py6K8z4%zPj;Cp@C4O<i-T>{Fx9+B2s|?bqI5vxV&yU&@>9
zXHy$g#1Gvx|GH64z|_5Z7SpbfMXr<oSMHbUIXZvq{QDKpvjaZ5Ps#LF*>Q{Y1<zc6
zwl`je3U&UmZ7uqyi_gwE*b*);zxKeRB^%#sW-Cr#cIDq&X7deyzV>SExzp18_}<~?
F@c^~Ps*?Z!

diff --git a/src/Signing/sign.bat b/src/Signing/sign.bat
index d270056c..e7ed45e3 100644
--- a/src/Signing/sign.bat
+++ b/src/Signing/sign.bat
@@ -10,8 +10,8 @@ call "..\..\doc\chm\create_chm.bat"
 cd %SIGNINGPATH%
 
 rem sign using SHA-256
-signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_R3Cross.cer /fd sha256 /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 "..\Release\Setup Files\veracrypt.sys" "..\Release\Setup Files\veracrypt-x64.sys" "..\Release\Setup Files\veracrypt-arm64.sys"
-signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /fd sha256 /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 "..\Release\Setup Files\VeraCrypt.exe" "..\Release\Setup Files\VeraCrypt Format.exe" "..\Release\Setup Files\VeraCryptExpander.exe" "..\Release\Setup Files\VeraCrypt-x64.exe" "..\Release\Setup Files\VeraCrypt Format-x64.exe" "..\Release\Setup Files\VeraCryptExpander-x64.exe" "..\Release\Setup Files\VeraCrypt-arm64.exe" "..\Release\Setup Files\VeraCrypt Format-arm64.exe" "..\Release\Setup Files\VeraCryptExpander-arm64.exe" "..\Release\Setup Files\VeraCrypt COMReg.exe" "..\Release\Setup Files\VeraCryptSetup.dll"
+signtool sign /v /sha1 2B174F12D921AF2FF576D867BE91E97E4ADC7D07 /ac GlobalSign_R3Cross.cer /fd sha256 /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 "..\Release\Setup Files\veracrypt.sys" "..\Release\Setup Files\veracrypt-x64.sys" "..\Release\Setup Files\veracrypt-arm64.sys"
+signtool sign /v /sha1 2B174F12D921AF2FF576D867BE91E97E4ADC7D07 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /fd sha256 /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 "..\Release\Setup Files\VeraCrypt.exe" "..\Release\Setup Files\VeraCrypt Format.exe" "..\Release\Setup Files\VeraCryptExpander.exe" "..\Release\Setup Files\VeraCrypt-x64.exe" "..\Release\Setup Files\VeraCrypt Format-x64.exe" "..\Release\Setup Files\VeraCryptExpander-x64.exe" "..\Release\Setup Files\VeraCrypt-arm64.exe" "..\Release\Setup Files\VeraCrypt Format-arm64.exe" "..\Release\Setup Files\VeraCryptExpander-arm64.exe" "..\Release\Setup Files\VeraCrypt COMReg.exe" "..\Release\Setup Files\VeraCryptSetup.dll"
 
 rem create setup and MSI
 cd "..\Release\Setup Files\"
@@ -57,6 +57,6 @@ rmdir /S /Q docs
 cd %SIGNINGPATH%
 
 rem sign Setup using SHA-256
-signtool sign /v /sha1 04141E4EA6D9343CEC994F6C099DC09BDD8937C9 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /fd sha256 /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 "..\Release\Setup Files\VeraCrypt Setup %VC_VERSION%.exe" "..\Release\Setup Files\VeraCrypt Portable %VC_VERSION%.exe" "..\Release\Setup Files\bin\VeraCrypt_%VC_VERSION_NBRE%_Setup_x64.msi" "..\Release\Setup Files\bin\VeraCrypt_%VC_VERSION_NBRE%_Setup_x64_en-us.msi"
+signtool sign /v /sha1 2B174F12D921AF2FF576D867BE91E97E4ADC7D07 /ac GlobalSign_SHA256_EV_CodeSigning_CA.cer /fd sha256 /tr http://rfc3161timestamp.globalsign.com/advanced /td SHA256 "..\Release\Setup Files\VeraCrypt Setup %VC_VERSION%.exe" "..\Release\Setup Files\VeraCrypt Portable %VC_VERSION%.exe" "..\Release\Setup Files\bin\VeraCrypt_%VC_VERSION_NBRE%_Setup_x64.msi" "..\Release\Setup Files\bin\VeraCrypt_%VC_VERSION_NBRE%_Setup_x64_en-us.msi"
 
 pause