Exclude files from re-sigining

[walltex]

How can I exclude some binary files (.exe, .dll etc) that are already signed by another vendor from re-signing by signtool on --releasify step?
Files are in app.asar.unpacked.

[luzlab]

I have this question as well. A DLL we use appears to check it's hash to make sure it hasn't been tampered with. The DLL does DRM stuff so it makes sense, but this issue is blocking us from signing our app since I don't see a way to control which files squirrel --releasify trys to sign, nor did I find a parameter to pass to signtool.exe to tell it to ignore files that are already signed.

[luzlab]

Hmm... I just looked through the Releasify code and saw that its not re-signing files. I did more digging and found my issue is the original DLL isn't signed in the first place...

Squirrel.Windows/src/Update/Program.cs

Line 411 in 475d554

if (isPEFileSigned(x.FullName)) {

[shiftkey]

Hmm... I just looked through the Releasify code and saw that its not re-signing files. I did more digging and found my issue is the original DLL isn't signed in the first place...

This is a good spot @luzlab - it looks like this check has been present since Squirrel.Windows 1.5.2 - @walltex are you able to confirm your binaries are signed correctly and that the log message below appears to indicate that it gets correctly skipped

Squirrel.Windows/src/Update/Program.cs

Line 412 in 475d554

this.Log().Info("{0} is already signed, skipping", x.FullName);