[Bug 16420] Certificate chaining error trying to use Microsoft signcode tool

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=16420


Juan Lang <juan_lang at yahoo.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1




--- Comment #10 from Juan Lang <juan_lang at yahoo.com>  2008-12-09 19:22:18 ---
(In reply to comment #8)
> Created an attachment (id=17781)
 --> (http://bugs.winehq.org/attachment.cgi?id=17781) [details]
> Log from running command with WINEDEBUG=+crypt

I'm not seeing the same behavior here.  It still fails, but differently. 
You're seeing a problem with decoding the SPC file:

trace:crypt:CryptQueryObject (00000001, 0x110486, 00000112, 00000002, 00000000,
(nil), 0x32fb90, (nil), 0x32fb94, (nil), (nil))
trace:crypt:CRYPT_ReadBlobFromFile L"mycredentials.spc"
(snip)
trace:crypt:CryptQueryObject returning 0

I generated my own self-signed cert using makecert.exe and the following
command:
wine makecert.exe -sv juan.pvk -n "CN=Juan Lang" -r juan.cer
I converted it to an SPC cert using cert2spc:
wine Cert2Spc.Exe juan.cer juan.spc
I then ran signcode.exe on an executable using the .spc file and .pvk file
generated in the first two steps:
wine signcode.exe -spc juan.spc -v juan.pvk -i winehq.org test.exe

This failed, but not in CryptQueryObject.  The first failure was the following
complaint:
Error: The software publishing certificate and private key do not match or do
not contain valid information.
Error: Signing Failed.  Result = 80092009, (-2146885623)

This patch fixed that error:
http://www.winehq.org/pipermail/wine-patches/2008-December/065751.html

The next error was a crash to the unimplemented
wintrust:WVTAsn1SpcSpOpusInfoEncode.  I sent in a patch for this as well:
http://www.winehq.org/pipermail/wine-patches/2008-December/065754.html

Currently it fails for me because wintrust:CryptSIPCreateIndirectData is a
stub:
fixme:wintrust:CryptSIPCreateIndirectData (0x32fcc0 0x32fba0 (nil)) stub
Error: Signing Failed.  Result = 8000ffff, (-2147418113)

Would you mind attaching your .spc file to help me debug why CryptQueryObject
is failing for you?


-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.