Support for Azure Trusted Signing

[EuanKerr]

With Azure Trusted Signing (formerly Azure Code Signing) now in public preview it would be handy to be able to sign files/clickonce using the Trusted Signing service.

Some more links:

• https://www.powershellgallery.com/packages/TrustedSigning

[dlemstra]

Would love to see support for this. The @ImageMagick project has a Trusted Signing certificate and we are using this to sign our installers and executables. But there is no support for that in this tool yet. And I would like to also sign my ImageMagick NuGet packages using that certificate in a GitHub pipeline.

And feel free to let me know if there is anything I can do to help.

[blowdart]

Throwing my weight behind this as I have a new package I want to test with and I'm trying to keep everything in GitHub actions as an added bonus.

[ROGG437063]

I am also supporting this request, our developers need to migrate to trusted signing, but without support for clickonce in any of the other trusted signing tools, that is not possible.

[ROGG437063]

This integration should probably use the SDK https://www.nuget.org/packages/Microsoft.Trusted.Signing.Client
Do take care that the SDK linked in trusted signing docs is deprecated

[ianjmcm]

@ROGG437063 sorry for the confusion on the docs regarding the SDK. We have kept the current version from our preview unlisted while we prep a new release of the SDK. This SDK will become publicly listed in the very near future. https://www.nuget.org/packages/Azure.CodeSigning.Sdk
cc: @Jaxelr

[Jaxelr]

@ROGG437063 Indeed, we expect the SDK to be publicly available once we sort through a few issues on the PR, but you can track that work here: Azure/azure-sdk-for-net#41191

[ROGG437063]

@Jaxelr Sounds good, any estimate of when that will be merged? It would also still need integration with sign cli for vsto manifest signing, right?

[demiliani]

Must to have. Please push 🙌🏻

[dtivel]

This prerelease version has Trusted Signing support. Thanks to @dlemstra for adding it! 👏