You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
CoseSignTool.exe validate appears to falsely report successful validation when the certificate chain does not lead to a known root.
This appears to be isolated to just the CoseSignTool.exe validate command line tool and not the CoseHandler API.
Repro steps:
1.) Produce a detached COSE signature (See: Sign command)
1.) Make sure that the root CA of the signing certificate is not installed in trusted root store
2.) Attempt to call CoseSignTool.exe validate on the payload and previously produced .cose file with no /Roots specified
3.) Observe "Validation succeeded message"
The text was updated successfully, but these errors were encountered:
elantiguamsft
changed the title
CoseSignTool.exe Validates incorrectly passes validation
CoseSignTool.exe validate incorrectly passes validation
Jan 10, 2024
CoseSignTool.exe validate appears to falsely report successful validation when the certificate chain does not lead to a known root.
This appears to be isolated to just the CoseSignTool.exe
validate
command line tool and not the CoseHandler API.Repro steps:
1.) Produce a detached COSE signature (See: Sign command)
1.) Make sure that the root CA of the signing certificate is not installed in trusted root store
2.) Attempt to call
CoseSignTool.exe validate
on the payload and previously produced .cose file with no /Roots specified3.) Observe "Validation succeeded message"
The text was updated successfully, but these errors were encountered: