konstantin89 / windows-pe-signature-verifying Goto Github PK

Hello,

I was looking at your CLI code and I noticed some strange behavior, not sure what the specific cause is.
I tried your CLI code on explorer.exe but I added some more specific std::wcout calls to see if it failed anywhere. I noticed that on MS signed files (e.g. explorer.exe, cmd.exe, etc.) it fails on the call to PeSignatureVerifier::GetTimestampCertificateInfo. When I use signtool.exe, I can see the Timestamp and it appears that all signing-related information is found. Any ideas why this could be?

Operating System: Windows Server 2012 R2

Steps to reproduce:

1. Compile the sample CLI tool, include additional std::wcout calls to see if a value other than ERROR_SUCCESS is called anywhere.
2. Run the tool using a Microsoft-signed binary as an argument
3. The tool will fail to display the timestamp.