(CkPython) Authenticode Sign an Executable (EXE) or DLL

See more Code Signing Examples

Demonstrates how to Authenticode sign an EXE or DLL.

Note: Chilkat's code signing class was added in v9.5.0.97

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# First create the following JSON to specify that SHA256 is to be used,
# and provide timestamp server information.

# {
#   "hashAlg": "sha256",
#   "timestampToken": {
#     "enabled": true,
#     "tsaUrl": "http://timestamp.digicert.com",
#     "requestTsaCert": true,
#     "hashAlg": "sha256"
#   }
# }

json = chilkat.CkJsonObject()
json.UpdateString("hashAlg","sha256")
json.UpdateBool("timestampToken.enabled",True)
json.UpdateString("timestampToken.tsaUrl","http://timestamp.digicert.com")
json.UpdateBool("timestampToken.requestTsaCert",True)
json.UpdateString("timestampToken.hashAlg","sha256")

# Load a code signing certificate..
cert = chilkat.CkCert()
success = cert.LoadPfxFile("C:/someDir/myCodeSigningCert.pfx","pfx password")
if (success == False):
    print(cert.lastErrorText())
    sys.exit()

# You can sign .exe or .dll files.
exePath = "C:/someOtherDir/HelloWorld.exe"

signer = chilkat.CkCodeSign()

# If successful, the following call will apply the signature to the EXE (or DLL).
success = signer.AddSignature(exePath,cert,json)
if (success == False):
    print(signer.lastErrorText())
    sys.exit()

print("Successfully applied the Authenticode signature.")