Standalone code signing tool for .exe files

I want to sign .exe files I produce. I already have code signing certificate, only last missing step is 'signtool.exe' (or any other tool that works and is free, preferrably command line so that it can be easily scripted).

My problem is that signtool.exe is part of .net framework sdk, which is huge download for this presumably small tool (selecting only win32 and .net tools gives me 0.5gb download). Is it possible to get this tool as a standalone download somewhere? (Google didn't help so far) Do you know some alternate small command line tool for signing .exe files?

code-signing

Peter Štibraný

Posted 2009-12-12T20:43:29.497

Reputation: 1 281

Answers

The SignTool tool is a command-line tool that digitally signs files, verifies signatures in files, or time stamps files.

SignTool is available as part of the Windows SDK, download link and ducumentation here.

Molly7244

Posted 2009-12-12T20:43:29.497

Reputation:

Thank you. My problem is that I only need single tool, but smallest download I was able to select via web-setup was about half gigabyte. – Peter Štibraný – 2009-12-13T09:27:33.333

Microsoft first released code signing technology ("Authenticode" in MS terminology) back in 1998. At that time microsoft provided a small (124 KB) self-extract ZIP file by the name "codesigningx86.exe".

Unfortunately this file is no longer available on Microsoft's site.

It may be downloaded from here and includes : signcode.exe, makecert.exe, cert2spc.exe, chktrust.exe, certmgr.exe, makecat.exe, makectl.exe.

harrymc

Posted 2009-12-12T20:43:29.497

Reputation: 306 093

https://web.archive.org/web/20170630155346if_/https://www.sslcertificaten.nl/files/codesigningx86.exe – Anders – 2019-07-16T16:23:46.807

As of 13 Aug 2013 the site referred to above says "18-07-2013 Server Maintenance in Progress. Please check back soon!" ... This solution may no longer be applicable.

– RedGrittyBrick – 2013-08-13T16:19:59.313

The site is down, but the tool can be found in many other places, for example here. Once posted, no file is ever lost.

– harrymc – 2013-08-13T17:01:39.277

Thank you. Sounds like reasonable alternative to signtool.exe – Peter Štibraný – 2009-12-13T09:28:44.627