Digital signature

[pavolholes]

Hi all and Valentin,
thanks a lot for a great work and amazing project. Is it possible to make the ep_setup.exe in the releases signed with digital signature so the Publisher is filled?

Thank you.

[pyrates999]

That costs money. Read here why:

https://codesigningstore.com/free-code-signing-certificate

From the article:

The code signing vetting process requires verification of certain things (documents), for example, government-issued ID proof, driving license, passport, and the financial and non-financial document containing your full name. And, this vetting process takes one to five days for completing and requires a large staff and operational costs as well. Due to these reasons, it’s not possible to offer a free code signing certificate –just like there are no free EV & OV SSL Certificates.

So if you want it to be signed, you could suggest a way to donate here instead.

[pavolholes]

Thanks for reply @pyrates999 . Thanks to your comment I found what I need to do some research.

I found the SigStore but that's not valid in Windows OS. But then in the Issues of the SigStore I found SignPath Foundation mentioned and that might be the solution.
From the sigstore/fulcio#250 (comment):

Disclaimer: I work for SignPath
Just wanted to clarify that for approved OSS projects, the SignPath Foundation provides free code signing certificates and of course the usage of our services are also free.

From the SignPath for Open Source projects I have a feeling it would be doable for the Explorer Patcher since it's a really big project with many stars and widely used. But I believe the repository owner @valinet should contact them via email to get the approval.

[pyrates999]

We'll see what happens then.

[SirWobbyTheFirst]

Bumping this with a +1 for SignPath.org because now that 22631 (Build 4169) has been pushed out to general release, I am not going to whitelist the executable in an antivirus just because it cannot be signed.