Build:Remove self-signing code and certs

Obsolete now that we use Azure signing, and introduced the possibility of impersonation if someone added this cert to a trusted store, etc. See FreeCAD/FreeCAD security advisory GHSA-447x-q64r-vm5h
2026-03-26 21:27:28 -05:00
parent 871ee19b76
commit 57847b8620
4 changed files with 1 additions and 4 deletions
@@ -1,4 +1,5 @@
 *.exe
+*.pfx
 *-SHA256.txt
 MSVCRedist
 FreeCAD
@@ -70,5 +70,3 @@ ManifestDPIAware true

 Outfile "${SETUP_EXE}"

-# sign the installer executable
-!finalize 'signing.bat ${SETUP_EXE}'
@@ -1,2 +0,0 @@
-signtool.exe sign /f FCweborg.pfx /p FreeCADIsCool /fd sha512 /tr http://timestamp.digicert.com /td sha512 /v %1
-certutil -hashfile %1 SHA256 > %1-SHA256.txt