0
votes

We have a .pfx and use the windows signtool to sign a DLL with it. I want to programmatically verify that the DLL is signed with our certificate when I load it. I use WinVerifyTrust, but that just verifies that is signed by a trusted publisher (I think). To verify that it is signed with our certificate, I think I should use CryptVerifyCertificateSignature. How do I create the "BLOB" of "CERT_SIGNED_CONTENT_INFO" from my DLL to pass to this function?

Or... is there a better or easier way to verify that the DLL is signed with our cert?

1

1 Answers

0
votes

Have a look at this answer: C# implementation to get SignedCms from signed file

If you would provide some more details - for instance programming language - the community would be able to help you further and answer more accurate :-)