[tbb-bugs] #17870 [Tor Browser]: Some Windows 10 users experience authenticode errors if Tor Browser is signed on Linux

[Tor Bug Tracker & Wiki]

#17870: Some Windows 10 users experience authenticode errors if Tor Browser is
signed on Linux
--------------------------+--------------------------
 Reporter:  gk            |          Owner:  tbb-team
     Type:  defect        |         Status:  new
 Priority:  High          |      Milestone:
Component:  Tor Browser   |        Version:
 Severity:  Major         |     Resolution:
 Keywords:  tbb-security  |  Actual Points:
Parent ID:  #15538        |         Points:
  Sponsor:                |
--------------------------+--------------------------

Comment (by cypherpunks):

 To prepare chain before sign:
 {{{
 --- AuthenticodeSigning.orig
 +++ AuthenticodeSigning

  - convert it to PEM: openssl x509 -in tpo_cert.der -inform der -outform
 pem \
                       -out tpo_cert.crt
 +....
 +Get intermediate certificate from eToken or somewhere,
 +(https://www.digicert.com/CACerts/DigiCertEVCodeSigningCA-SHA2.crt)
 +then if it's in DER format
 +....
 +- convert to PEM: openssl x509 -in DigiCertEVCodeSigningCA-SHA2.crt \
 +                  -inform der -outform pem -out middle_cert.crt
 +- append: cat middle_cert.crt >> tpo_cert.crt
 +
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17870#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online