mirror of
https://github.com/mRemoteNG/mRemoteNG.git
synced 2026-02-17 22:11:48 +08:00
664799c01b
Oder editbin.exe files from Microsoft were signed with a different cert thumbprint. This update makes it easier to add additional valid thumbprints for MS signed tools
15 lines
714 B
PowerShell
15 lines
714 B
PowerShell
param (
|
|
# Full path to the Microsoft executable to validate
|
|
$Path
|
|
)
|
|
|
|
$valid_microsoft_cert_thumbprints = @("3BDA323E552DB1FDE5F4FBEE75D6D5B2B187EEDC", "108E2BA23632620C427C570B6D9DB51AC31387FE")
|
|
$exe_signature = Get-AuthenticodeSignature -FilePath $Path
|
|
$baseErrorMsg = "Could not validate the certificate of $Path. "
|
|
|
|
if ($exe_signature.Status -ne "Valid") {
|
|
Write-Error -Message ($baseErrorMsg+"The signature was invalid.") -ErrorAction Stop
|
|
}
|
|
elseif ($valid_microsoft_cert_thumbprints -notcontains $exe_signature.SignerCertificate.Thumbprint) {
|
|
Write-Error -Message ($baseErrorMsg+"The certificate thumbprint ($($exe_signature.SignerCertificate.Thumbprint)) is not trusted.") -ErrorAction Stop
|
|
} |