Notepad++ v8.8.7 Release Candidate

donho

@xomx
Well spotted!

With the signtool, I passed the argument /as to signed with both the first certif and the 2nd one - that makes the duplication signature on binaries when the script runs morn than 1 time.

I just fixed the script to pass /a to sign with the first certif and /as with the 2nd one.

More info:

/a          Select the best signing cert automatically. SignTool will find all
            valid certs that satisfy all specified conditions and select the
            one that is valid for the longest. If this option is not present,
            SignTool will expect to find only one valid signing cert.


/as         Append this signature. If no primary signature is present, this
            signature will be made the primary signature instead.

The explanation is not explicite for /a. In my experience, usage of this parameter removes all the signatures before signing with the certificate.

The problem of signature duplication is fixed in RC2:
https://download.notepad-plus-plus.org/repository/8.x/8.8.7.RC2/

edit: with some tests, it turns out that the argument /a does nothing for the first signing - without /a it still removes all signatures before signing.