Skip to content
⌘ NSIS Forum Archive

NSIS Script - Digitally Signing Windows Installer

2 posts

Kamal14042015#

NSIS Script - Digitally Signing Windows Installer

Hello,

I am new to the implementation of NSIS where i would like to create a windows installer file and digitally sign it via NSIS Script file. I am able to create the windows installer using the .nsi script file by executing the "makensis" command in the windows command prompt window.

Also , i would like to digitally sign the windows installer file via NSIS script only . When i tried to digitally sign the newly created windows installer file via NSIS script, it is saying that it is successfully signed. but i found that the file is not getting signed via NSIS script file. I am using the following command to sign the application in the "Installer" section of script file

!system 'cmd.exe /C "signtool.exe sign /fd SHA256 /a /f /path/to/pfx /p password /t "timestampurl" /path/to/installer/file"'

I tried executing the command directly in the windows command prompt and the file is getting digitally signed

Can you please suggest me the process of digitally signing the windows installer immediately after creating it?

Thanks and Regards
Kamal



JasonFriday13#
Use !finalize instead of !system. If using 3.08 or newer, use !uninstfinalize to sign the uninstaller too.