Fix test signing in Windows release pipeline

Open
#286 0 comments 0 reactions 1 assignee View on GitHub

@zooba is already working on this.

Since Oct 7, 2025.

Assessment

This issue has not been assessed yet.

Description

bug

Currently test signing isn't supported because you need to have installed the (normally untrusted) root onto the build machine first. This is because the signing tools won't submit files for signing unless the certificate is trusted locally (see https://github.com/dotnet/sign/issues/908).

The root certificate needed is at http://www.microsoft.com/pkiops/certs/Microsoft%20Identity%20Verification%20TEST%20ONLY%20Root%20Certificate%20Authority%202020.crt

Should be a simple PowerShell command to install it into the trusted root CAs, but I'll figure out the exact command later.

(Same task as https://github.com/python/pymanager/issues/179)

Dominant language
Python
Stars
61
Forks
48
Avg merge
1h 22m
Merged PRs (30d)
4

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from python/release-tools

All issues in python/release-tools

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.