8000 Some workloads files not getting signed correctly with 3PartySHA2 · Issue #49091 · dotnet/sdk · GitHub
[go: up one dir, main page]
Skip to content
Some workloads files not getting signed correctly with 3PartySHA2 #49091
New issue
New issue
Open
Open
Some workloads files not getting signed correctly with 3PartySHA2#49091
Assignees
akoeplinger
Labels
Area-WorkloadsuntriagedRequest triage from a team member
@mmitche

Description

@mmitche
mmitche
opened on May 21, 2025

It looks like after the workload builds moved to dotnet/sdk, some redisted binaries are getting signed with the MS certs rather than 3PartySHA. See https://dev.azure.com/dnceng/internal/_build/results?buildId=2714390&view=logs&s=6884a131-87da-5381-61f3-d7acc3b91d76&j=fa4e7bdb-0412-58a3-8823-7a72e2d8c65d

These should be signed with 3partySHA2:

  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\7620\fil686B06FBC17285B62048CA7025B38871/node.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright Node.js contributors. MIT license.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\7640\fil686B06FBC17285B62048CA7025B38871/node.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library 
82C7
is considered 3rd party library due to its copyright: 'Copyright Node.js contributors. MIT license.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\7659\fil01BD77AA50A55A26538BA8CC0664D2BD/sqlite3.dll' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Unspecified'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\7777\fil210FE88BD66D0310EA50975B34833B26/python311.dll' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\7787\fil23687B1C7A80D2A653D49D3B05062EE6/pythonw.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\7990\fil5062D05D8365549D2641CDA2D1D377F3/python3.dll' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8265\fil9D3FF6FC1DB1D44571833B08D73A78DC/python.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8647\fil01BD77AA50A55A26538BA8CC0664D2BD/sqlite3.dll' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Unspecified'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8657\fil210FE88BD66D0310EA50975B34833B26/python311.dll' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8658\fil23687B1C7A80D2A653D49D3B05062EE6/pythonw.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8670\fil5062D05D8365549D2641CDA2D1D377F3/python3.dll' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8683\fil9D3FF6FC1DB1D44571833B08D73A78DC/python.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: 'Copyright © 2001-2023 Python Software Foundation. Copyright © 2000 BeOpen.com. Copyright © 1995-2001 CNRI. Copyright © 1991-1995 SMC.'.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\8991\fil09739E8E135F10EFA4833C634E3B8F26/wasm-as.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\9240\fil1324DE778739F3BF4E9C103881AE8AB4/wasm-fuzz-lattices.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\9667\fil23CD68DF0287603AB364292336F2F484/wasm-shell.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\10624\fil48EA85D2354FB8C25F65CC313342E47A/wasm-fuzz-types.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\11995\fil7E3FE4DFAB4416803DB6647E054A0FB3/wasm-reduce.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\12037\fil7FD540329B348B68B1941DCB32D7D336/wasm-ctor-eval.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\12487\fil9118833391AA693A6EBE3998FF3471E0/wasm-split.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\12559\fil93C28BA71D2B450E9C3EB9A723FFE2AA/wasm-dis.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\14209\filD2F6DD6D3C2310C7BEDC8766FD064444/wasm-merge.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\14246\filD3FC5BD86C4DF8FC45A8224B81137187/wasm-metadce.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15071\filF4DC4189E90C6109F23C7EA7B7A4135A/wasm-opt.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15306\filFE2E7C6A8CC96383CE9A6365CE2AED71/wasm2js.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15328\filFF2B4F9B0F83257B038C64E7D99C9583/wasm-emscripten-finalize.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15370\fil09739E8E135F10EFA4833C634E3B8F26/wasm-as.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15372\fil1324DE778739F3BF4E9C103881AE8AB4/wasm-fuzz-lattices.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15373\fil23CD68DF0287603AB364292336F2F484/wasm-shell.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15375\fil48EA85D2354FB8C25F65CC313342E47A/wasm-fuzz-types.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15381\fil7E3FE4DFAB4416803DB6647E054A0FB3/wasm-reduce.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15382\fil7FD540329B348B68B1941DCB32D7D336/wasm-ctor-eval.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15384\fil9118833391AA693A6EBE3998FF3471E0/wasm-split.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15385\fil93C28BA71D2B450E9C3EB9A723FFE2AA/wasm-dis.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15391\filD2F6DD6D3C2310C7BEDC8766FD064444/wasm-merge.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15392\filD3FC5BD86C4DF8FC45A8224B81137187/wasm-metadce.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15395\filF4DC4189E90C6109F23C7EA7B7A4135A/wasm-opt.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15396\filFE2E7C6A8CC96383CE9A6365CE2AED71/wasm2js.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.
  SIGN004: Signing 3rd party library 'D:\a\_work\1\s\artifacts\tmp\Release\ContainerSigning\15397\filFF2B4F9B0F83257B038C64E7D99C9583/wasm-emscripten-finalize.exe' with Microsoft certificate 'MicrosoftDotNet500'. The library is considered 3rd party library due to its copyright: ''.

Metadata

Metadata

Assignees

Labels

Area-WorkloadsuntriagedRequest triage from a team member

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions
    0