Hacktoberfest 2026：维护者为十月标记出来的 issue，仍然开放、适合新手。 浏览 Hacktoberfest issue

Windows AMD64 MSI contains unsigned executables blocked by Smart App Control

未关闭
  • 哪里不对？
#5,903 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

维护者通常 1 天内回复

还没有人认领这个 Issue。

评估

难度
4/5
预计耗时
3-5 天
新手友好度
44/100
Issue 类型
缺陷
描述清晰度
基本清楚
活跃度
活跃
技术栈
cpp
领域
release, security

调研方向

Start by checking the Windows AMD64 release packaging and signing workflow for the MSI and ZIP artifacts; the issue names sunshine.exe and sunshinesvc.exe as unsigned. Confirm whether executable signing is expected, then reproduce the Smart App Control block with the reported release and verify the Authenticode status of the packaged executables. Done means the release artifacts have the expected signatures and Sunshine starts under Smart App Control.

由索引模型根据 Issue 内容生成。

描述

Is there an existing issue for this?
  • I have searched the existing issues
Is your issue described in the documentation?
  • I have read the documentation
Is your issue present in the latest beta/pre-release?

None

Describe the Bug

Issue: Sunshine v2026.914.233613 cannot start on Windows 11 with Smart App Control enabled because its executables are unsigned.

Steps to reproduce:

  1. Enable Windows 11 Smart App Control.
  2. Download the official Sunshine-Windows-AMD64-installer.msi for v2026.914.233613.
  3. Install Sunshine using the MSI installer.
  4. Attempt to start the Sunshine service or run sunshine.exe directly.
  5. Windows blocks execution with Application Control error 4551.

Observed behavior:

  • The MSI installer completes successfully.
  • SunshineService is installed but remains stopped.
  • Running sc.exe start SunshineService returns StartService FAILED 4551: Application Control policy blocked this file.
  • Running sunshine.exe directly is also blocked.
  • Windows Security displays a Smart App Control notification indicating that the application's publisher could not be verified.

Signature verification:

  • Official MSI installer: Valid
  • C:\Program Files\Sunshine\sunshine.exe: NotSigned
  • C:\Program Files\Sunshine\tools\sunshinesvc.exe: NotSigned
  • sunshine.exe extracted directly from the MSI: NotSigned

I also compared the SHA-256 hashes of the installed executable and the executable extracted from the MSI. They are identical, confirming that the installed executable was not modified during installation.

The MSI itself has a valid digital signature, but the executable files checked above are unsigned.

Could the Windows AMD64 release artifacts be checked to confirm whether the executable files are expected to be digitally signed?

Expected Behavior

Sunshine should install and start successfully on Windows 11 with Smart App Control enabled, using appropriately signed and trusted executable files.

The Sunshine service should start without Application Control error 4551, and the web interface should become accessible.

Additional Context

Sunshine version: v2026.914.233613

Installation package: Sunshine-Windows-AMD64-installer.msi (official GitHub release)

Security configuration: Windows 11 Smart App Control enabled

SHA-256 of sunshine.exe (installed and extracted from MSI):

8E2C4627318432B67520A9DE7CFD8AC089068A2873CCF8443756733A1AF7D571

The executable was also tested from a separately extracted Sunshine ZIP package and was blocked by Windows Application Control.

Disabling Smart App Control has not been attempted, because I would prefer to keep this Windows security feature enabled.

Host Operating System

Windows

Operating System Version

Windows 11 Home

Architecture

amd64/x86_64

Package

Windows - msi installer (recommended)

GPU Type

NVIDIA

GPU Model

NVIDIA GeForce RTX 5070 Ti Laptop GPU

GPU Driver/Mesa Version

32.0.15.7290

Capture Method

None

Apps
Log output
Sunshine cannot start, so a current Sunshine web UI troubleshooting log is unavailable.

Windows Service Control Manager output:


[SC] StartService FAILED 4551:
Application Control policy blocked this file.


PowerShell service status:


Name             Status   StartType
SunshineService  Stopped  Automatic


Running `sunshine.exe` directly also produces an Application Control policy block.

Authenticode verification:


sunshine.exe       NotSigned
sunshinesvc.exe    NotSigned
MSI installer      Valid
Online logs

No response

主要语言
C++
星标
42.2k
派生
2.2k
平均合并
1 天 13 小时
30 天内合并 PR
127

环境准备

  • 没有 Dockerfile 或 Docker Compose 文件
  • 没有 Pull Request 模板
  • 阅读贡献指南

从这里开始

  1. 先读完整个 Issue，再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库，在一个分支上完成修改。
  4. 提交 Pull Request，并在描述里引用这个 Issue 编号。

LizardByte/Sunshine 的其他 Issue

查看 LizardByte/Sunshine 的全部 Issue

相似的 Issue

更多 C++ Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。