Skip to content

KSP based signing fixes#66

Open
kirillkovalenko wants to merge 4 commits intoGoogleCloudPlatform:masterfrom
kirillkovalenko:2604-ksp-signing-fixes
Open

KSP based signing fixes#66
kirillkovalenko wants to merge 4 commits intoGoogleCloudPlatform:masterfrom
kirillkovalenko:2604-ksp-signing-fixes

Conversation

@kirillkovalenko
Copy link
Copy Markdown

Latest CNG Provider does not seem to really work on Windows 11.

This PR contains two code and one build fixes. Once applied signtool.exe and .NET CmsSigner (via .NET X509Certificate2) starts to work.

I suspect that the build fix may actually be dropped in your environment.

On Windows 11 NCRYPT_PERSIST_ONLY_FLAG is being passed  to GetKeyProperty

And 0 is a valid legacy flag open opening KSP key according to the documentation.
Also answer "CLR IsEphemeral" property to reduce logging noise
@google-cla
Copy link
Copy Markdown

google-cla Bot commented Apr 10, 2026

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant