Skip to content

Commit f0437b2

Browse files
vcsjonesvcsjones
authored
Merge pull request #40 from vcsjones/build
Add some things for building and signing
2 parents 5b80258 + 82f2280 commit f0437b2

File tree

5 files changed

+213
-67
lines changed

5 files changed

+213
-67
lines changed

‎.editorconfig

Lines changed: 117 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,117 @@
1+
# To learn more about .editorconfig see https://aka.ms/editorconfigdocs
2+
###############################
3+
# Core EditorConfig Options #
4+
###############################
5+
# All files
6+
[*]
7+
indent_style = space
8+
# Code files
9+
[*.{cs,csx,vb,vbx}]
10+
indent_size = 4
11+
insert_final_newline = true
12+
charset = utf-8
13+
###############################
14+
# .NET Coding Conventions #
15+
###############################
16+
[*.{cs,vb}]
17+
# Organize usings
18+
dotnet_sort_system_directives_first = true
19+
# this. preferences
20+
dotnet_style_qualification_for_field = false:silent
21+
dotnet_style_qualification_for_property = false:silent
22+
dotnet_style_qualification_for_method = false:silent
23+
dotnet_style_qualification_for_event = false:silent
24+
# Language keywords vs BCL types preferences
25+
dotnet_style_predefined_type_for_locals_parameters_members = true:silent
26+
dotnet_style_predefined_type_for_member_access = true:silent
27+
# Parentheses preferences
28+
dotnet_style_parentheses_in_arithmetic_binary_operators = always_for_clarity:silent
29+
dotnet_style_parentheses_in_relational_binary_operators = always_for_clarity:silent
30+
dotnet_style_parentheses_in_other_binary_operators = always_for_clarity:silent
31+
dotnet_style_parentheses_in_other_operators = never_if_unnecessary:silent
32+
# Modifier preferences
33+
dotnet_style_require_accessibility_modifiers = for_non_interface_members:silent
34+
dotnet_style_readonly_field = true:suggestion
35+
# Expression-level preferences
36+
dotnet_style_object_initializer = true:suggestion
37+
dotnet_style_collection_initializer = true:suggestion
38+
dotnet_style_explicit_tuple_names = true:suggestion
39+
dotnet_style_null_propagation = true:suggestion
40+
dotnet_style_coalesce_expression = true:suggestion
41+
dotnet_style_prefer_is_null_check_over_reference_equality_method = true:silent
42+
dotnet_style_prefer_inferred_tuple_names = true:suggestion
43+
dotnet_style_prefer_inferred_anonymous_type_member_names = true:suggestion
44+
dotnet_style_prefer_auto_properties = true:silent
45+
dotnet_style_prefer_conditional_expression_over_assignment = true:silent
46+
dotnet_style_prefer_conditional_expression_over_return = true:silent
47+
###############################
48+
# Naming Conventions #
49+
###############################
50+
# Style Definitions
51+
dotnet_naming_style.pascal_case_style.capitalization = pascal_case
52+
# Use PascalCase for constant fields
53+
dotnet_naming_rule.constant_fields_should_be_pascal_case.severity = suggestion
54+
dotnet_naming_rule.constant_fields_should_be_pascal_case.symbols = constant_fields
55+
dotnet_naming_rule.constant_fields_should_be_pascal_case.style = pascal_case_style
56+
dotnet_naming_symbols.constant_fields.applicable_kinds = field
57+
dotnet_naming_symbols.constant_fields.applicable_accessibilities = *
58+
dotnet_naming_symbols.constant_fields.required_modifiers = const
59+
###############################
60+
# C# Coding Conventions #
61+
###############################
62+
[*.cs]
63+
# var preferences
64+
csharp_style_var_for_built_in_types = true:silent
65+
csharp_style_var_when_type_is_apparent = true:silent
66+
csharp_style_var_elsewhere = true:silent
67+
# Expression-bodied members
68+
csharp_style_expression_bodied_methods = false:silent
69+
csharp_style_expression_bodied_constructors = false:silent
70+
csharp_style_expression_bodied_operators = false:silent
71+
csharp_style_expression_bodied_properties = true:silent
72+
csharp_style_expression_bodied_indexers = true:silent
73+
csharp_style_expression_bodied_accessors = true:silent
74+
# Pattern matching preferences
75+
csharp_style_pattern_matching_over_is_with_cast_check = true:suggestion
76+
csharp_style_pattern_matching_over_as_with_null_check = true:suggestion
77+
# Null-checking preferences
78+
csharp_style_throw_expression = true:suggestion
79+
csharp_style_conditional_delegate_call = true:suggestion
80+
# Modifier preferences
81+
csharp_preferred_modifier_order = public,private,protected,internal,static,extern,new,virtual,abstract,sealed,override,readonly,unsafe,volatile,async:suggestion
82+
# Expression-level preferences
83+
csharp_prefer_braces = true:silent
84+
csharp_style_deconstructed_variable_declaration = true:suggestion
85+
csharp_prefer_simple_default_expression = true:suggestion
86+
csharp_style_pattern_local_over_anonymous_function = true:suggestion
87+
csharp_style_inlined_variable_declaration = true:suggestion
88+
###############################
89+
# C# Formatting Rules #
90+
###############################
91+
# New line preferences
92+
csharp_new_line_before_open_brace = all
93+
csharp_new_line_before_else = true
94+
csharp_new_line_before_catch = true
95+
csharp_new_line_before_finally = true
96+
csharp_new_line_before_members_in_object_initializers = true
97+
csharp_new_line_before_members_in_anonymous_types = true
98+
csharp_new_line_between_query_expression_clauses = true
99+
# Indentation preferences
100+
csharp_indent_case_contents = true
101+
csharp_indent_switch_labels = true
102+
csharp_indent_labels = flush_left
103+
# Space preferences
104+
csharp_space_after_cast = false
105+
csharp_space_after_keywords_in_control_flow_statements = true
106+
csharp_space_between_method_call_parameter_list_parentheses = false
107+
csharp_space_between_method_declaration_parameter_list_parentheses = false
108+
csharp_space_between_parentheses = false
109+
csharp_space_before_colon_in_inheritance_clause = true
110+
csharp_space_after_colon_in_inheritance_clause = true
111+
csharp_space_around_binary_operators = before_and_after
112+
csharp_space_between_method_declaration_empty_parameter_list_parentheses = false
113+
csharp_space_between_method_call_name_and_opening_parenthesis = false
114+
csharp_space_between_method_call_empty_parameter_list_parentheses = false
115+
# Wrapping preferences
116+
csharp_preserve_single_line_statements = true
117+
csharp_preserve_single_line_blocks = true

‎AuthenticodeLint/CheckEngine.cs

Lines changed: 18 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -17,12 +17,24 @@ static CheckEngine()
1717

1818
public IReadOnlyList<IAuthenticodeRule> GetRules()
1919
{
20-
return (from type in typeof(IAuthenticodeRule).Assembly.GetExportedTypes()
21-
where typeof(IAuthenticodeRule).IsAssignableFrom(type) && type.GetConstructor(Type.EmptyTypes) != null
22-
let instance = (IAuthenticodeRule)Activator.CreateInstance(type)! // We know this should not be null.
23-
orderby instance.RuleId
24-
select instance
25-
).ToList();
20+
return
21+
[
22+
new Sha1PrimarySignatureRule(),
23+
new Sha2SignatureExistsRule(),
24+
new NoWeakFileDigestAlgorithmsRule(),
25+
new TimestampedRule(),
26+
new PublisherInformationPresentRule(),
27+
new PublisherInformationUrlHttpsRule(),
28+
new SigningCertificateDigestAlgorithmRule(),
29+
new TrustedSignatureRule(),
30+
new WinCertificatePaddingRule(),
31+
new NoUnknownUnsignedAttibuteRule(),
32+
new StrongKeyLengthRule(),
33+
new RsaDsaPrimarySignatureRule(),
34+
new MaxKeyLengthRule(),
35+
new SinglePrimarySignatureRule(),
36+
new NoSha1Rule(),
37+
];
2638
}
2739

2840
public RuleEngineResult RunAllRules(string file, IReadOnlyList<ICmsSignature> signatures, List<IRuleResultCollector> collectors, CheckConfiguration configuration)

‎Directory.Build.props

Lines changed: 0 additions & 5 deletions
This file was deleted.

‎build/build.proj

Lines changed: 0 additions & 56 deletions
This file was deleted.

‎build/build.ps1

Lines changed: 78 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,78 @@
1+
# PowerShell < 7 does not handle ZIP files correctly.
2+
if ($PSVersionTable.PSVersion.Major -lt 7) {
3+
throw "This script requires PowerShell 7 or higher."
4+
}
5+
6+
$rootDir = $MyInvocation.MyCommand.Path
7+
8+
if (!$rootDir) {
9+
$rootDir = $psISE.CurrentFile.Fullpath
10+
}
11+
12+
if ($rootDir) {
13+
foreach($i in 1..2) {
14+
$rootDir = Split-Path $rootDir -Parent
15+
}
16+
}
17+
else {
18+
throw 'Could not determine root directory of project.'
19+
}
20+
21+
if (![bool](Get-Command -ErrorAction Stop -Type Application dotnet)) {
22+
throw 'dotnet SDK could not be found.'
23+
}
24+
25+
$winKitDir = Get-ItemPropertyValue 'HKLM:\SOFTWARE\Microsoft\Windows Kits\Installed Roots' 'KitsRoot10'
26+
27+
if (!$winKitDir -or !(Test-Path -Path $winKitDir)) {
28+
throw 'Windows SDK path is not found.'
29+
}
30+
31+
$sdkVersion = Get-ChildItem -Path 'HKLM:\SOFTWARE\Microsoft\Windows Kits\Installed Roots' | Sort-Object Name -Descending | Select-Object -ExpandProperty PSChildName -First 1
32+
$sdkPath = Join-Path -Path $winKitDir -ChildPath 'bin'
33+
$sdkPath = Join-Path -Path $sdkPath -ChildPath $sdkVersion
34+
35+
$architecture = [System.Environment]::GetEnvironmentVariable("PROCESSOR_ARCHITECTURE")
36+
$archDirName = switch ($architecture) {
37+
'ARM64' { 'arm64' }
38+
'x86' { 'x86' }
39+
'AMD64' { 'x64' }
40+
Default { throw 'Unknown architecture' }
41+
}
42+
43+
$sdkBinPath = Join-Path -Path $sdkPath -ChildPath $archDirName
44+
$objDir = Join-Path -Path $rootDir -ChildPath 'obj'
45+
$outDir = Join-Path -Path $rootDir -ChildPath 'out'
46+
47+
pushd $rootDir
48+
49+
Remove-Item -Path $objDir -Recurse -Force -ErrorAction SilentlyContinue
50+
New-Item -Path $objDir -ItemType Directory
51+
52+
Remove-Item -Path $outDir -Recurse -Force -ErrorAction SilentlyContinue
53+
New-Item -Path $outDir -ItemType Directory
54+
55+
dotnet pack -p:OutputFileNamesWithoutVersion=true -p:ContinuousIntegrationBuild=true -c Release -o $objDir AuthenticodeLint\AuthenticodeLint.csproj
56+
57+
Expand-Archive -Path $objDir\AuthenticodeLint.nupkg -DestinationPath $objDir\AuthenticodeLint.nupkg.dir
58+
59+
Remove-Item -Path $objDir\AuthenticodeLint.nupkg
60+
61+
& "$sdkBinPath\signtool.exe" sign /d "AuthenticodeLint" /sha1 73f0844a95e35441a676cd6be1e79a3cd51d00b4 /fd SHA384 /td SHA384 /tr "http://timestamp.digicert.com" /du "https://github.com/vcsjones/AuthenticodeLint" "$objDir\AuthenticodeLint.nupkg.dir\tools\net8.0\any\authlint.dll"
62+
63+
Compress-Archive -Path "$objDir\AuthenticodeLint.nupkg.dir\*" -DestinationPath "$objDir\AuthenticodeLint.nupkg"
64+
65+
dotnet nuget sign --certificate-fingerprint 68821304869e065c24e0684eb43bf974e124642f3437f2ff494a93bb371d029a --hash-algorithm SHA384 --timestamper "http://timestamp.digicert.com" --overwrite "$objDir\AuthenticodeLint.nupkg"
66+
67+
Copy-Item -Path "$objDir\AuthenticodeLint.nupkg" -Destination "$outDir\AuthenticodeLint.nupkg"
68+
69+
dotnet publish -c Release -r win-arm64 -p:ContinuousIntegrationBuild=true -o "$objDir\AuthenticodeLint-arm64" .\AuthenticodeLint\AuthenticodeLint.csproj
70+
dotnet publish -c Release -r win-x64 -p:ContinuousIntegrationBuild=true -o "$objDir\AuthenticodeLint-x64" .\AuthenticodeLint\AuthenticodeLint.csproj
71+
72+
& "$sdkBinPath\signtool.exe" sign /d "AuthenticodeLint" /sha1 73f0844a95e35441a676cd6be1e79a3cd51d00b4 /fd SHA384 /td SHA384 /tr "http://timestamp.digicert.com" /du "https://github.com/vcsjones/AuthenticodeLint" "$objDir\AuthenticodeLint-x64\authlint.exe"
73+
& "$sdkBinPath\signtool.exe" sign /d "AuthenticodeLint" /sha1 73f0844a95e35441a676cd6be1e79a3cd51d00b4 /fd SHA384 /td SHA384 /tr "http://timestamp.digicert.com" /du "https://github.com/vcsjones/AuthenticodeLint" "$objDir\AuthenticodeLint-arm64\authlint.exe"
74+
75+
Copy-Item -Path "$objDir\AuthenticodeLint-x64\authlint.exe" -Destination "$outDir\authlint-x64.exe"
76+
Copy-Item -Path "$objDir\AuthenticodeLint-arm64\authlint.exe" -Destination "$outDir\authlint-arm64.exe"
77+
78+
popd

0 commit comments

Comments
 (0)