Documentation
¶
Overview ¶
Package authenticode verifies Windows installer signatures against an expected publisher.
Index ¶
Constants ¶
This section is empty.
Variables ¶
var ErrUnsupported = errors.New("unsupported Authenticode verification")
ErrUnsupported means a file or signature exceeds the supported subset.
Functions ¶
func Supports ¶ added in v0.10.1
Supports reports whether Verify reads a file of this name: an MSI, or a portable executable named as a program or library.
func Verify ¶
Verify checks that every Authenticode signature covers the file's signed content and that all of them belong to one publisher, then reports it. A zero want derives the signer; otherwise it must match.
The publisher identity digests the certificate subject together with the issuing authority's public key, so it survives routine renewal while a change of authority or publisher becomes visible. That authority is also the trust anchor; no operating-system root store is consulted. A timestamp countersignature fixes the time at which certificate validity is judged.
Types ¶
This section is empty.
Source Files