| 1 | name: Connect to Certum cloud signing |
| 2 | description: Verify the SimplySign installer and connect to the configured certificate. |
| 3 | inputs: |
| 4 | username: |
| 5 | required: true |
| 6 | description: SimplySign account |
| 7 | otp-uri: |
| 8 | required: true |
| 9 | description: TOTP provisioning URI |
| 10 | thumbprint: |
| 11 | required: true |
| 12 | description: Expected SHA-1 certificate thumbprint |
| 13 | runs: |
| 14 | using: composite |
| 15 | steps: |
| 16 | - name: Verify SimplySign installer |
| 17 | shell: pwsh |
| 18 | run: | |
| 19 | $ErrorActionPreference = 'Stop' |
| 20 | Invoke-WebRequest 'https://files.certum.eu/software/SimplySignDesktop/Windows/9.4.3.90/SimplySignDesktop-9.4.3.90-64-bit-en.msi' -OutFile SimplySignDesktop.msi |
| 21 | $signature = Get-AuthenticodeSignature SimplySignDesktop.msi |
| 22 | if ($signature.Status -ne 'Valid' -or $signature.SignerCertificate.Subject -notmatch 'Asseco Data Systems') { |
| 23 | throw 'SimplySign installer signature or publisher verification failed' |
| 24 | } |
| 25 | - name: Authenticate cloud certificate |
| 26 | uses: dismine/windows-app-signing-setup-action@89ae3b032d4bc7a5b98d1a42a34e61ecb6faad64 |
| 27 | with: |
| 28 | certum-username: ${{ inputs.username }} |
| 29 | certum-otp-uri: ${{ inputs.otp-uri }} |
| 30 | certum-key-id: ${{ inputs.thumbprint }} |
| 31 | capture-diagnostics: 'false' |
| 32 |