Use new code-signing cert, SHA256 signatures

fasterthanlime · fasterthanlime · commit fe5acab6c40a · 2016-09-16T14:23:10.000+02:00
diff --git a/scripts/ci-build.sh b/scripts/ci-build.sh
@@ -24,10 +24,10 @@ export CI_OS="windows"
 
 # sign (win)
 if [ "$CI_OS" = "windows" ]; then
-  WIN_SIGN_KEY="Open Source Developer, Amos Wenger"
-  WIN_SIGN_URL="http://timestamp.verisign.com/scripts/timstamp.dll"
+  WIN_SIGN_KEY="itch corp."
+  WIN_SIGN_URL="http://timestamp.comodoca.com/?td=sha256"
 
-  signtool.exe sign //v //s MY //n "$WIN_SIGN_KEY" //t "$WIN_SIGN_URL" elevate.exe
+  signtool.exe sign //v //s MY //n "$WIN_SIGN_KEY" //fd sha256 //tr "$WIN_SIGN_URL" //td sha256 elevate.exe
 fi
 
 # verify
