Signing Windows executables on Linux

sign-exe.sh

#!/bin/bash

# Based on http://development.adaptris.net/users/lchan/blog/2013/06/07/signing-windows-installers-on-linux/

openssl pkcs12 -in $1 -nocerts -nodes -out .key.pem
openssl pkcs12 -in $1 -nokeys -nodes -out .cert.pem
openssl rsa -in .key.pem -outform DER -out .authenticode.key
openssl crl2pkcs7 -nocrl -certfile .cert.pem -outform DER -out .authenticode.spc
osslsigncode -spc .authenticode.spc -key .authenticode.key -t http://timestamp.verisign.com/scripts/timstamp.dll -in $2 -out $3
rm .key.pem .cert.pem .authenticode.key .authenticode.spc