Code signing password prompt during command-line build

[frefol]

I am using the command-line to build our project (via a script). Since adding code signing capabilities, I am getting prompted for my code signing password when it comes to signing the msi file. Does anyone know how to get around this? I don't get prompted for the password when signing the files included in the project. This really puts a wrench in our automated build system. Thanks in advance.

[gigi]

Hi,

It is an expected behavior if you are using "SignCode", the password dialog is displayed by the tool itself. You could use the "SignTool" with a ".pfx" file created from the ".spc" and ".pvk" files, using either "pvkimprt.exe" or "pvk2pfx.exe".

Hope this helps.

Regards,
Gigi
_______________
Gheorghe Rada
Advanced Installer Team
http://www.advancedinstaller.com

[frefol]

I am signtool. After revisiting pvkimprt, I realized what I have done wrong. I exported the private key. However, I entered a password during the export process. That's why I am still prompted for the password. I wasn't getting prompted when signing my files because you can pass the password to signtool using its "/p" command line option.

My suggestion is to provide a command-line interface in AdvancedInstaller.com to pass the password to signtool. Anyway, thanks for help me realizing where I went wrong.

[willynt]

Hi,

I'm having the same issue. My pfx embeded private key is password protected. So, using signtool, I use the /p switch.
Is it possible to add such a switch in the AdvancedInstaller.com command line to provide the password?

Thank you very much
Regards
William

[gigi]

Hi,

Is it possible to add such a switch in the AdvancedInstaller.com command line to provide the password?

We have added this on our TODO list and will be available in a future version of Advanced Installer. I'm afraid I cannot give an ETA for now. Thank you for your suggestion.

Regards,
Gigi
_______________
Gheorghe Rada
Advanced Installer Team
http://www.advancedinstaller.com

[dgboone]

Hi,

Was this feature ever implemented? If it was, how do I pass the password on the command line?

Regards,
Dwayne

[Cosmin]

Hi Dwayne,

Unfortunately we did not implement this improvement (it wasn't requested by a lot of users and we tried to add more popular features). However, I increased its priority and hopefully it will be included in a future version.

Regards,
Cosmin

[Marco28]

This feature was requested 10 years ago, but it seems that this feature is still not available. It would be great when this could be implemented as we can then store the password as secrets in our build pipelines.
Is there any timeline for implementing this feature?

[Daniel]

Hello,

Unfortunately this improvement request was declined by our development team and the reason is that passing a password string through a command line interface could create password exposure breaches. Thus we do not think it will be a best practice so you can be able to set the password for your certificate through a command line interface.

We recommend you to manually set within Advanced Installer GUI the password for the certificate you choose in "Digitally Signatures" page and save the project. Afterwards you can safely build silently from command line the setup project without any password prompt.

Thank you for your understanding on this.

All the best,
Daniel