Python Requires Chilkat v11.7.0+

Verify the Authenticode Signature of an MSI, PowerShell, or VBScript File

See more Code Signing Examples

Demonstrates how to verify the Authenticode signature of a Windows Installer package (.msi), a PowerShell file (.ps1, .psm1, .psd1), or a VBScript file (.vbs), and how to get the certificate of the signer. Verifying these file types requires Chilkat v11.7.0 or later. Python

import sys
import chilkat2

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Starting in Chilkat v11.7.0, VerifySignature can verify the Authenticode signature of
#   - Windows Installer packages (.msi)
#   - PowerShell scripts, modules, and data files (.ps1, .psm1, .psd1)
#   - VBScript files (.vbs)
# in addition to EXE and DLL files.

# This example verifies a signed PowerShell script.
# To verify an .msi or a .vbs, pass the path of that file instead.
path = "C:/someDir/Deploy.ps1"

codeSign = chilkat2.CodeSign()
sigInfo = chilkat2.JsonObject()

# VerifySignature returns true if the file has a valid Authenticode signature.
# It returns false if the file is not signed, if the file was changed after it was signed,
# or if the signing certificate is not trusted.
valid = codeSign.VerifySignature(path,sigInfo)
if (valid == False):
    # The LastErrorText explains why the verification failed.
    print(codeSign.LastErrorText)
    sys.exit()

print("The Authenticode signature is valid.")

# The details of the signature are returned in the JSON, in the same layout as for an EXE or DLL.
# See Verify Authenticode Signature of EXE or DLL for a sample of the JSON and code that parses it.
print("signing algorithm: " + sigInfo.StringOf("pkcs7.verify.signerInfo[0].signingAlgName"))
print("hash algorithm: " + sigInfo.StringOf("pkcs7.verify.signerInfo[0].cert.digestAlgName"))

# Get the certificate of the signer.
# The signer certificate is available only after a call to VerifySignature that returned true.
# It is the public certificate only.  It does not include the signer's private key.
signerCert = chilkat2.Cert()
success = codeSign.GetSignerCert(signerCert)
if (success == False):
    print(codeSign.LastErrorText)
    sys.exit()

print("signed by: " + signerCert.SubjectCN)
print("certificate issued by: " + signerCert.IssuerCN)
print("certificate serial number: " + signerCert.SerialNumber)
print("certificate valid until: " + signerCert.ValidToStr)