6

How can I see all code signing signatures an executable has? I know that requests for a tool are usually considered as opinion based, but I really can't find one and I don't expect many answers.

Background:

I have an executable that was signed by the vendor (for UAC purposes). The application was then tested by me and I apply my signature using Windows SDK 8 signtool /as (append signature).

I cannot see the certificate in Windows Explorer, although it says "certificate list".

Signtool /verify does not show the certificate (maybe because it reports an error for a not trusted certificate before).

I cannot get the certificate with C#, because the the class supports only one certificate (the first one). For the C# solution, I posted a question on StackOverflow.

Googling for freeware, I could not find any tools which would display all certificates. Even the demo version of the commercial PE Explorer doesn't show it.

Update 2015-06-01

SysInternals Sigcheck (as proposed in an answer) shows only the first signature plus the certificate chain.

In the meanwhile, there must have been an update to Microsoft Windows. Windows Explorer now shows a list of certificates.

Digital Signatures Windows Explorer

Improve this question
1

1 Answer 1

Reset to default
3

You can use the free osslsigncode tool for this: https://github.com/SummitRoute/osslsigncode-fork

osslsigncode verify my.exe

UPDATE: The binary installed through MSYS2 using the command below is a better option (updated and non-Cygwin dependencies):

pacman -S mingw-w64-{i686,x86_64}-osslsigncode

Improve this answer
1
  • 1
    It seems that osslsigncode does not consider digital signature catalogs. It might also need an update, because on my PC it fails with 10896:error:21075076 which seems to be related to openssl Bug 1526959
    – Thomas Weller
    Aug 12, 2016 at 11:17

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .