osslsigncode工程的学习概述笔记工程库地址工程的编译osslsigncodeM工程文件列表osslsigncodeM工程搭建细节原始工程实现的改动自己封装的包含openssl和curl的实现osslsigncodeM工程命令行的用法备注

VS2019调试环境备注

如果要单步openssl的API学学作者怎么对签好的PE进行验签(code

sgin)取PE中的签名位置和签名数据长度算PE的实际文件累加和将签名数据(DER格式)转为PKCS7数据将签名数据保存成文件供调试备注END

openssl3.2

用osslsigncode工程里面这种用公版openssl的验签的方法,

如果逆向工程师硬要暴力patch,

https://github.com/mtrojnar/osslsigncode.git

无法正常在(vs2019

CURLE_PEER_FAILED_VERIFICATION).

curl8.6.0),

自己复原了一个osslsigncode的VS2019X64工程,

命名为osslsigncodeM

\---docINSTALL.W32.mdNEWS.mdREADME.mdREADME_softhsm-example-token.mdTODO.md

osslsigncodeM工程搭建细节

.\;D:\my_dev\lib\openssl_3d2\include;D:\my_dev\lib\curl-8.6.0_1-win64-mingw\include库文件包含路径

指定openssl,

D:\my_dev\lib\openssl_3d2\lib;D:\my_dev\lib\curl-8.6.0_1-win64-mingw\lib;D:\my_dev\lib\zlib_1d3输出文件路径改一下,

方便调试和归档.

$(ProjectDir)\bin_x64\$(TargetName)$(TargetExt)原始工程实现的改动

osslsigncode.h

Malgorzata.Olszowkastunnel.org*///

add

OPENSSL_NO_DEPRECATED自己封装的包含openssl和curl的实现

/*!

--------------------------------------------------------------------------------

开关宏

--------------------------------------------------------------------------------#define

MY_USE_APPLINK//

--------------------------------------------------------------------------------

开关宏

--------------------------------------------------------------------------------#endif

#ifndef

D:\my_dev\my_local_git_prj\study\openSSL\nmake_test\test_c\prj_005_afalgtest.c\my_openSSL_lib.c

*/#include

OPENSSL_Uplink(00007FF8B7EF0FE8,08):

OPENSSL_Applink

搞定了.对已经签名的PE文件附加一段1024bytes的数据,

对于第3个用法,

D:\my_dev\my_local_git_prj\study\openSSL\osslsigncodeM\bin_x64osslsigncodeM.exe

--help

{md5,sha1,sha2(56),sha384,sha512}

desc

{md5,sha1,sha2(56),sha384,sha512}

-ph

{md5,sha1,sha2(56),sha384,sha512}

-index

{md5,sha1,sha2(56),sha384,sha512}

-require-leaf-hash

{md5,sha1,sha2(56),sha384,sha512}:XXXXXXXXXXXX...

-nest

{md5,sha1,sha2(56),sha384,sha512}:XXXXXXXXXXXX...

-verbose

]D:\my_dev\my_local_git_prj\study\openSSL\osslsigncodeM\bin_x64备注

VS2019调试环境

openssl-3.2.0_debug_build_ok.7z给APP用的openssl的DLL同级改个名字,

就会跳出某个文件找不到,

OPENSSL_zalloc(sizeof(PE_CTX));pe_ctx-header_size

nrvas;pe_ctx-sigpos

pe_calc_realchecksum(FILE_FORMAT_CTX

*ctx)

err:OPENSSL_free(buf);BIO_free(bio);return

checkSum;

WIN_CERT_TYPE_PKCS_SIGNED_DATA)

{//

WIN_CERT_TYPE_PKCS_SIGNED_DATA)

{/*