Checking plugin signature on Windows

You can check the digital signature of our MBS Plugin files on Windows. There are three ways:

1. Use Get-AuthenticodeSignature function in Powershell.

2. Use signtool command line tool (requires Windows SDK installed).

3. Use properties dialog for DLL files.

Let us show you all threelink ways today.

Get-AuthenticodeSignature

If you open the command prompt and it runs powershell, you can use Get-AuthenticodeSignature to check the signature:

Next thing may be to show details. For this you write code. You call Get-AuthenticodeSignature and instead of just showing the resulting object as text, we assign it to a variable:

$sig = Get-AuthenticodeSignaturepath

For the path, you can simply drag & drop the plugin file into the window.

Then we show the certificate with formatted list view:

$sig.SignerCertificate | Format-List *

This shows the code signature and the properties like the subject and issuer.

Signtool

If you have developer tools installed and the Windows SDK, then you can use signtool in the command terminal:

signtool verify /v "filename.exe"

Properties dialog

You can rename the plugin file to end with .DLL and then use properties in the contextual menu or the alt-enter keyboard shortcut. Then in the tab for digital signatures, check the signature and the details there. For MBS Plugin this will show Christian Schmitz Software GmbH, our limited in Germany.

Once you verified the signature is valid, provided by a responsible issuer like Sectigo and is named after our company. If you ever get a modified plugin, we assume it would have different names there or no signature at all.

For the next plugin version we add new functions Files.CheckSignature and Files.SignatureInfo to verify the signature and read details.