path: root/os/windows/dobuild.cmd
diff options
authorRebecca Cran <>2020-08-29 23:25:50 +0000
committerJens Axboe <>2020-08-29 18:54:16 -0600
commita478f61ffa8eed25c7224add8ef2217d94fbb208 (patch)
tree6a36331166516a5bc0fe1ecd8c764a8356eda324 /os/windows/dobuild.cmd
parentdb83b0abd16bbd6b8f589a993e6f70d9812be6e3 (diff)
Update os/windows/dobuild.cmd to support signing binaries/installer
Since organizations are increasingly requiring software to be digitally signed, or have heuristics that penalize unsigned software, add support to do build.cmd to sign both the .exe binaries and the .msi installer. Signed-off-by: Rebecca Cran <> Signed-off-by: Jens Axboe <>
Diffstat (limited to 'os/windows/dobuild.cmd')
1 files changed, 12 insertions, 0 deletions
diff --git a/os/windows/dobuild.cmd b/os/windows/dobuild.cmd
index ef12d82d..d06a2afa 100644
--- a/os/windows/dobuild.cmd
+++ b/os/windows/dobuild.cmd
@@ -26,9 +26,21 @@ if not defined FIO_ARCH (
goto end
+if defined SIGN_FIO (
+ signtool sign /n "%SIGNING_CN%" /t ..\..\fio.exe
+ signtool sign /as /n "%SIGNING_CN%" /tr /td sha256 /fd sha256 ..\..\fio.exe
+ signtool sign /n "%SIGNING_CN%" /t ..\..\t\*.exe
+ signtool sign /as /n "%SIGNING_CN%" /tr /td sha256 /fd sha256 ..\..\t\*.exe
"%WIX%bin\candle" -nologo -arch %FIO_ARCH% -dFioVersionNumbers="%FIO_VERSION_NUMBERS%" install.wxs
@if ERRORLEVEL 1 goto end
"%WIX%bin\candle" -nologo -arch %FIO_ARCH% examples.wxs
@if ERRORLEVEL 1 goto end
"%WIX%bin\light" -nologo -sice:ICE61 install.wixobj examples.wixobj -ext WixUIExtension -out %FIO_VERSION%-%FIO_ARCH%.msi
+if defined SIGN_FIO (
+ signtool sign /n "%SIGNING_CN%" /tr /td sha256 /fd sha256 %FIO_VERSION%-%FIO_ARCH%.msi
+) \ No newline at end of file