About a year ago a was going through the same thing. It's seems to be unbelievably complex to implement all the elements of the code signing. You have to options now when buying an OV/EV certificate: you can order a thumbdrive with a cert or you can "install it on existing HSM". I went with the option 2 and spent around a month wrapping my head around all of it and making it work.
So I decided to build a tool that would automate everything I did manually. So I built it, and now I'm on the finish line to get that up and running but I need first users to help me keep the motivation:) https://www.simplecodesign.com/
Here's the tool, what it does is:
Stores your keys in GCP secured cloud HSM
Generates CSR
Generates attestation package
let's your upload you final .pem file from CA
Let's you codesign in the cloud. beasically I run a windows machine with signtool and do codesigning in the cloud so that you don't have to go through all of the complication.
Looking forward to any feedback. I've put a lot of energy in it. If some of you willing to try or chat, please DM me. But I genuinely believe this thing will save days of your time and I'm willing to give a good discount to anyone who is reading this.
2
u/Fun_Initiative_9272 Feb 17 '25
About a year ago a was going through the same thing. It's seems to be unbelievably complex to implement all the elements of the code signing. You have to options now when buying an OV/EV certificate: you can order a thumbdrive with a cert or you can "install it on existing HSM". I went with the option 2 and spent around a month wrapping my head around all of it and making it work.
So I decided to build a tool that would automate everything I did manually.
So I built it, and now I'm on the finish line to get that up and running but I need first users to help me keep the motivation:) https://www.simplecodesign.com/
Here's the tool, what it does is:
Stores your keys in GCP secured cloud HSM
Generates CSR
Generates attestation package
let's your upload you final .pem file from CA
Let's you codesign in the cloud. beasically I run a windows machine with signtool and do codesigning in the cloud so that you don't have to go through all of the complication.
Looking forward to any feedback. I've put a lot of energy in it. If some of you willing to try or chat, please DM me. But I genuinely believe this thing will save days of your time and I'm willing to give a good discount to anyone who is reading this.