chris@jclem
Posts: 1
Joined: Thu Dec 24, 2020 7:57 am

Code signing certificate

Thu Dec 24, 2020 8:27 am

I am using a code signing certificate, "Use from certificate store:" referencing "HCP Software Pty Ltd. Issuer: DigiCert SHA2 Assured ID Code Signing CA. Valid from 04/23/2020 tp 04/28/2023: Store: User\CA"

The build fails with the following message.

The digital signing of the APPDIR\wsys.exe file failed. Error message: 'SignTool Error: No certificates were found that met all the given criteria.'

What are "all the given criteria" and how do I debug such an error? The error details are copied below.

Advanced Installer 17.8 build f367c492
*** Stack Trace (x86) ***

[0x75eca892] RaiseException()
[0x021f157a] -----
[0x0104cef8] -----
[0x0104a4bb] -----
[0x0104a1de] -----
[0x01223bf4] -----
[0x019a4e6f] -----
[0x01044535] -----
[0x01044421] -----
[0x01165806] -----
[0x012c5afb] -----
[0x00e40fc7] -----
[0x00d052f7] -----
[0x00b79adc] -----
[0x019a5808] -----
[0x774c53fe] RtlAllocateHeap()
[0x75eb225b] FlsGetValue()
[0x021f40b2] -----
[0x021f0b09] -----
[0x00b9090e] -----
[0x7540fa29] BaseThreadInitThunk()
[0x774e75f4] RtlGetAppContainerNamedObjectPath()
[0x774e75c4] RtlGetAppContainerNamedObjectPath()
[0x008e0000] MODULE_BASE_ADDRESS

In the meanwhile, wishing you all a Merry Christmas.
:)

Catalin
Posts: 6542
Joined: Wed Jun 13, 2018 7:49 am

Re: Code signing certificate

Tue Jan 05, 2021 10:33 pm

Hello Chris and welcome to our forums,

As it can be seen, the error is given by the SignTool.exe tool (which we use to sign the files from your project).
What are "all the given criteria" and how do I debug such an error? The error details are copied below.
Unfortunately, I can not really answer this. This error message is pretty common and it can be encountered in multiple scenarios.

Regarding the debugging, this can be done manually by using the /debug parameter of the signtool.exe tool (this is, of course, if the signing operation fails manually as well).
Store: User\CA
Judging by the above, if I am not mistaken, your certificate is installed per user in the certification authority - this would be the "Intermediate Certification Authorities" store (please correct me if I am wrong).

If possible, could you please try to install your certificate in the "Trusted Root Certification Authorities" and let me know if it works as expected?

Additionally, could you please also use the "Use file from disk" option and let me know if everything works as expected?

Looking forward to hearing from you!

P.S.: Hope you had a wonderful Christmas as well! :)

Best regards,
Catalin
Catalin Gheorghe - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Building Installers”