azmcp.dll isn't Authenticode signed

[tmeschter]

I was checking on the signing of various files in the NPM packages for the 0.3.0 release, and found that azmcp.dll in the x64 package wasn't signed, while the copy in the ARM64 package was signed.

I also noticed that various dependencies (like modelcontextprotocol.dll) aren't Authenticode signed either, but I'm not sure what the expectations are around that.

[tmeschter]

Assigning to @hallipr per Teams conversation.

[hallipr]

It looks like we're only signing the EXEs in the bin folder and not all of the DLLs. For proper signing, we need to sign our EXE and DLLs as 1st party, all remaining unsigned dlls as 3rd party

[msalaman]

@joshfree is this still on track for August 14? Was asked to check on the status of this because compliance of our Visual Studio extension is dependent on this

[weshaggard]

PR #887 should fix this. It will sign all dlls and exes. We may need to follow-up on whether we need to split the signing to avoid the 3rd party libraries.

[weshaggard]

To update I've done the work to split up the signing between MS and 3rd party dlls in PR #787