Module code_signature

Module code_signature 

Source
Expand description

These fields contain information about binary code signatures.

Constantsยง

CODE_SIGNATURE_DIGEST_ALGORITHM
The hashing algorithm used to sign the process. This value can distinguish signatures when a file is signed multiple times by the same signer but with a different digest algorithm.
CODE_SIGNATURE_EXISTS
Boolean to capture if a signature is present.
CODE_SIGNATURE_SIGNING_ID
The identifier used to sign the process. This is used to identify the application manufactured by a software vendor. The field is relevant to Apple *OS only.
CODE_SIGNATURE_STATUS
Additional information about the certificate status. This is useful for logging cryptographic errors with the certificate validity or trust status. Leave unpopulated if the validity or trust of the certificate was unchecked.
CODE_SIGNATURE_SUBJECT_NAME
Subject name of the code signer
CODE_SIGNATURE_TEAM_ID
The team identifier used to sign the process. This is used to identify the team or vendor of a software product. The field is relevant to Apple *OS only.
CODE_SIGNATURE_TIMESTAMP
Date and time when the code signature was generated and signed.
CODE_SIGNATURE_TRUSTED
Stores the trust status of the certificate chain. Validating the trust of the certificate chain may be complicated, and this field should only be populated by tools that actively check the status.
CODE_SIGNATURE_VALID
Boolean to capture if the digital signature is verified against the binary content. Leave unpopulated if a certificate was unchecked.