Logo Questions Linux Laravel Mysql Ubuntu Git Menu
HTML CSS JAVASCRIPT SQL PYTHON PHP BOOTSTRAP JAVA JQUERY R React Kotlin
 

Is there any way to check for digital signature on a file programmatically in Powershell?

Tags:

command-line

powershell

authenticode

I've a build script which signs a file with a digital certificate (Microsoft Authenticode). I want to create a test script which checks that the file is successfully signed. It's sufficient with a boolean indicating the existence of any signature on the file.

Can I do that with PowerShell without any extensions? If not, what do I need?

like image 728
Nilzor Avatar asked Nov 09 '13 13:11

Nilzor

People also ask

How do you check if a file has a digital signature?

Open the file that contains the digital signature you want to view. Click File > Info > View Signatures. In the list, on a signature name, click the down-arrow, and then click Signature Details.

How can I tell if a PowerShell script is digitally signed?

Opening the Script's File Properties Another way to check the script's digital signature is to open the script's file properties in Windows Explorer. To do so: In Windows Explorer, navigate to the PowerShell script's location. In this example, the script is in C:\ATA\myscript.

How can I tell if an EXE file is signed?

From a Windows operating system: Right click the file the main executable file (.exe), select Properties > Digital Signatures. Under Signature list, select the Signature, and click Details. You will see information regarding the Code Signing certificate that was used to sign the executable.

How do you check if a DLL is digitally signed?

Open the properties sheet for the . dll from Windows Explorer. If a tab "Digital Signatures" is shown, it's a signed assembly. If the tab is missing, it's unsigned.

2 Answers

Try the Get-AuthenticodeSignature-cmdlet

(Get-AuthenticodeSignature "C:\windows\explorer.exe").Status -eq 'Valid'

True

(Get-AuthenticodeSignature "D:\notes.txt").Status -eq 'Valid'

False
like image 197
Frode F. Avatar answered Oct 13 '22 11:10

Frode F.

You could simply call signtool.exe to verify the result.

like image 32
jessehouwing Avatar answered Oct 13 '22 10:10

jessehouwing
Sign in to Comment

Related questions

Basic PowerShell Script Issue: "Expressions are only allowed as the first element of a pipeline"
Increment version in a text file
How do you check to see if Hyper-V is enabled using PowerShell?
git stash apply unknown option: -encodedCommand error
Equivalent to Bash alias in PowerShell
Passing Powershell variables into a scriptblock
How to create real objects with behavior (methods) in PowerShell?
Return object from array with highest value
PowerShell: What is the best way to check whether the current user has permission to overwrite a file in PowerShell?
How do I perform a bitwise or (|) for enumerations in PowerShell?
New-SelfSignedCertificate to create certificate gives Access Denied
How to run MSBuild from Powershell without spawning msbuild.exe process?
PowerShell - Convert Ticks to Time
Run R script from Powershell
Windows Forms look different in Powershell and Powershell ISE. Why?
PowerShell's Write-Debug won't output arrays, but Write-Output does. Is this on purpose?
Batch launching PowerShell with a multiline command parameter
Error message installing Chocolatey in PowerShell
Get a list of all Resources in my Azure Subscription (Powershell Preferably)
Running a command on each directory in a list using PowerShell

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!