Skip to content

Windows exe certificate serial number doesn't match docs for 1.19.1 release #131

@gregsskyles

Description

@gregsskyles

I followed the instructions in docs/security/verify-installers.md with respect to Windows executables with the file from the 1.19.1 release page and don't see the expected serial number (for either of the two signatures found in the exe).

  • Documented: For releases since July 14, 2022: d77e4f8b938f56ae265cd08e9193490c
  • Actual (Microsoft issued signature): 33000852bd6c3a151ff92180ee0000000852bd
  • Actual (Actalis issued signature): 0546d987b1f62925d8c96672c9bb8ea0

I'd submit a PR to updated the expected serial numbers, but I don't know that they have changed, or what the 'since' date would be in that case. Since the gpg signature verified with the asc file provided in the release, I'm guessing the exe file is good, and the Windows code signing signatures have been updated at some point since 2022.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions