[tor-bugs] #17870 [Tor Browser]: Some Windows 10 users experience authenticode errors if Tor Browser is signed on Linux

[Tor Bug Tracker & Wiki]

#17870: Some Windows 10 users experience authenticode errors if Tor Browser is
signed on Linux
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
     Type:  defect                               |  team
 Priority:  High                                 |         Status:  closed
Component:  Tor Browser                          |      Milestone:
 Severity:  Major                                |        Version:
 Keywords:  tbb-security, TorBrowserTeam201601,  |     Resolution:  fixed
  GeorgKoppen201601                              |  Actual Points:
Parent ID:  #15538                               |         Points:
  Sponsor:                                       |
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 Replying to [comment:6 cypherpunks]:
 > To prepare chain before sign:
 > {{{
 > --- AuthenticodeSigning.orig
 > +++ AuthenticodeSigning
 >
 >  - convert it to PEM: openssl x509 -in tpo_cert.der -inform der -outform
 pem \
 >                       -out tpo_cert.crt
 > +....
 > +Get intermediate certificate from eToken or somewhere,
 > +(https://www.digicert.com/CACerts/DigiCertEVCodeSigningCA-SHA2.crt)
 > +then if it's in DER format
 > +....
 > +- convert to PEM: openssl x509 -in DigiCertEVCodeSigningCA-SHA2.crt \
 > +                  -inform der -outform pem -out middle_cert.crt
 > +- append: cat middle_cert.crt >> tpo_cert.crt
 > +
 > }}}

 Thanks, this seems to work. 5.5a6 will be signed this way.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17870#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online