Bug 565937 - Remove digital signature from generated RCP's exe
Summary: Remove digital signature from generated RCP's exe
Status: NEW
Alias: None
Product: PDE
Classification: Eclipse Project
Component: Build (show other bugs)
Version: 4.14   Edit
Hardware: PC Windows 10
: P3 normal (vote)
Target Milestone: ---   Edit
Assignee: pde-build-inbox CLA
QA Contact:
URL:
Whiteboard: stalebug
Keywords:
Depends on:
Blocks:
 
Reported: 2020-08-10 04:25 EDT by Narayana Swamy CLA
Modified: 2023-11-03 09:09 EDT (History)
2 users (show)

See Also:


Attachments
Eclipse's Signature in the generated exe file (20.80 KB, image/png)
2020-08-10 04:25 EDT, Narayana Swamy CLA
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Narayana Swamy CLA 2020-08-10 04:25:27 EDT
Created attachment 283821 [details]
Eclipse's Signature in the generated exe file

We are facing a problem in the generated RCP using Tycho Maven build (Tycho version 1.6.0), where the generated exe is digitally signed by Eclipse. 

Until now we were using Eclipse 4.8 where the exe was not signed by Eclipse. Recently we have migrated to Eclipse 4.14, where we face this issue. 

Since the generated exe is already signed by Eclipse (please refer attachment), we are not able to add our signature to it.

Is there a way to generate the product without the exe being signed by Eclipse ?

Or is there any property that I could configure in pom.xml, so that the signing step will be skipped ?


Thank you.
Comment 1 Christoph Laeubrich CLA 2020-08-25 03:07:35 EDT
As already mentioned on the mailing list, the exe is NOT signed by the maven build.
If you want to have an exe with an own signature you can simply build it your own, publish it into a P2 repo and consume the binary artifacts from there.
Comment 2 Narayana Swamy CLA 2021-02-01 08:02:08 EST
Hello Christoph Laeubrich,

Thanks for providing your feedback.

We do not want to add our custom signature, but we need to avoid the eclipse's default digital signing of the generated product's exe file.

This did not happen to us in Eclipse 4.8 & previous versions & happens in later versions.
Comment 3 Phil Beauvoir CLA 2021-11-12 07:02:44 EST
Have you tried using the Windows signtool to remove the Eclipse signature?

signtool remove /s YourApp.exe

See https://stackoverflow.com/questions/341168/can-i-remove-a-digital-signature-from-a-dll
Comment 4 Narayana Swamy CLA 2021-11-12 07:49:30 EST
Hello Phil Beauvoir,

Thanks for you response. 

Currently we are using windows Signtool only to remove the digital signature.
Comment 5 Eclipse Genie CLA 2023-11-03 09:09:52 EDT
This bug hasn't had any activity in quite some time. Maybe the problem got resolved, was a duplicate of something else, or became less pressing for some reason - or maybe it's still relevant but just hasn't been looked at yet.

If you have further information on the current state of the bug, please add it. The information can be, for example, that the problem still occurs, that you still want the feature, that more information is needed, or that the bug is (for whatever reason) no longer relevant.

--
The automated Eclipse Genie.