sign ghostpdf (and create cert for ps1-signing)

for i.e. win10/2016

<br></br>Make ROOT:<br></br>makecert -pe -n "CN=my.root.at" -a sha1 -eku 1.3.6.1.4.1.311.10.3.5,1.3.6.1.5.5.7.3.3 -r -sv my.root.at.pvk my.root.at.cer -ss Root -sr localMachine -len 4096

Make Child for Sign HW:
makecert -pe -n “CN=my.child.from.my.root.at” -ss my -a sha1 -eku 1.3.6.1.4.1.311.10.3.5,1.3.6.1.5.5.7.3.3 -iv my.root.at.pvk -ic my.root.at.cer

Store root in trusted root and child in trusted Publishers i.e.
“%~dp0certmgr.exe” -add -c “%~dp0my.root.at.cer” -s -r localMachine root
“%~dp0certmgr.exe” -add -c “%~dp0my.child.from.my.root.at.cer” -s -r localMachine trustedPublisher

Edit ghostpdf.inf:
……….
[Version]
Signature=”$Windows NT$”
Provider=Ghostgum Software Pty Ltd
ClassGUID={4D36E979-E325-11CE-BFC1-08002BE10318}
Class=Printer
CatalogFile=ghostpdf.cat
DriverVer=01/02/2017,1.0.0.1
……………..

“C:\Program Files (x86)\Windows Kits\10\bin\x86\Inf2Cat.exe” /driver:”%~dp0GS-SRC\lib” /os:8_X64,8_X86,Server8_X64,Server2008R2_X64,7_X64,7_X86,Server2008_X64,Server2008_X86,Vista_X64,Vista_X86,Server2003_X64,Server2003_X86,XP_X64,XP_X86,2000,10_X86,10_X64,Server10_X64

“C:\Program Files (x86)\Windows Kits\10\Tools\bin\i386\signtool.exe” sign /i my.root.at /n “my.child.from.my.root.at” “%~dp0GS-SRC\lib\ghostpdf.cat”

Add-On:
Make Child for PS1-Signing:
makecert -pe -n “CN=ps1.from.my.root.at” -ss my -a sha1 -eku 1.3.6.1.5.5.7.3.3 -iv my.root.at.pvk -ic my.root.at.cer