Set-AuthenticodeSignature with timestampserver "http://timestamp.globalsign.com/tsa/r6advanced1" failed #26951
Description
Prerequisites
- Write a descriptive title.
- Make sure you are able to repro it on the latest released version
- Search the existing issues.
- Refer to the FAQ.
- Refer to Differences between Windows PowerShell 5.1 and PowerShell.
Steps to reproduce
Set-AuthenticodeSignature failed when using Globalsign's timestamp server "http://timestamp.globalsign.com/tsa/r6advanced1".
- test.exe is signed without timestamp.
- Signing with SignTool.exe is successful.
- UsingDigiCert's timestamp server("http://timestamp.digicert.com") works fine.
Expected behavior
PS> $Cert=Get-ChildItem -Path Cert:\CurrentUser\My -CodeSigningCert | Sort-Object -Property NotAfter -Descending | Select-Object -First 1
PS> $TimestampServer = "http://timestamp.globalsign.com/tsa/r6advanced1"
PS> Set-AuthenticodeSignature -Certificate $Cert -Filepath .\test.exe -HashAlgorithm "SHA256" -TimestampServer $TimestampServer
SignerCertificate Status StatusMessage Path
----------------- ------ ------------- ----
E5A2A461450AF6DEFF23741ED491AAF65E825582 Valid Signature verified. test.exeActual behavior
SignerCertificate Status StatusMessage Path
----------------- ------ ------------- ----
UnknownError ASN1 タグの値が間違って… test.exe
Note: "ASN1 タグの値が間違って…" is "Invalid ASN1 Tag value." in English.Error details
No message for Get-Error.Environment data
PS> $PSVersionTable
Name Value
---- -----
PSVersion 7.6.0-rc.1
PSEdition Core
GitCommitId 7.6.0-rc.1
OS Microsoft Windows 10.0.26200
Platform Win32NT
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion 2.4
SerializationVersion 1.1.0.1
WSManStackVersion 3.0Visuals
No response