Authenticode signing check about pedump HOT 3 CLOSED

A correct certificate verification implies maintaining local list of trusted CA's, certificate chaining, etc.

pedump --security outputs the signature if it exists
you can use it in a script like:

#!/bin/sh

FNAME=$1

if pedump --security $FNAME -qqq | grep -q 'Issuer:'; then
    echo $FNAME has signature
else
    echo $FNAME has no signature
fi

from pedump.

Thanks for the --security tip. I don't know how I missed it.

As for verification of the CA chain, all modern OSes have CA roots and cert chains on them somewhere, and libraries like OpenSSL know how to tap into them and use them.

from pedump.

For HTTPS they are.
But I'm pretty sure that executable signing has different certs and their sources.

from pedump.