mirror of
https://github.com/OrcaSlicer/OrcaSlicer.git
synced 2026-06-10 14:02:47 +00:00
48acf4f13b
signtool verify /pa exits non-zero when the certificate chain terminates in an untrusted root, which is always the case for the SignPath self-signed test certificate. Add an -AllowUntrustedRoot switch to verify-authenticode.ps1 that accepts a signed-but-untrusted-root result (while still failing on unsigned or otherwise invalid files), and pass it from the workflow during test-signing. Remove the switch once signing-policy-slug moves to release-signing with a production CA-issued certificate, so release builds enforce a fully trusted chain.