A way to check file Digital Signature

Ruby
1

Hi all, I am new to the forum.
I’m a Beginner(+) or maybe intermediate(-) programmer in Ruby :).
I am trying to find a way to retrieve\extract a Digital Signature from
exe file.
The main goal is a test to make sure a specific file have a Valid
Digital Signature.

Any help will be great
thank you
Tom.

2

Good evening,

you need to explain in more detail what you want to achieve, as the
purpose determines the strategy.

Your description arouses questions:

1.) Do you speak of existing signatures which do already exist for
the exe-files that you want to “test” ?

2.) Is this a self-defined programming-exercise or are you trying to
re-invent the wheel?

3.) If the signatures must first be provided by yourself, which
decisions have you taken already, concerning the kind of signature that
you wish to apply and in which way will the signatures be provided to an
interested party?

3

Hi Michael, thank you for replaying, I will add details.

  1. Yes, i am talking about existing signature, and about exe-file that
    already signed with that signature.

  2. This is not an exercise, its for work trying to create a test that
    will assure our files are signed.

  3. I don’t understand this one :).

Thank you.

4

Sorry for the delay, I have had no opportunity to check the forum
earlier.

Tomer Gra wrote in post #1160412:

  1. Yes, i am talking about existing signature, and about exe-file that
    already signed with that signature.

So you must know, how the signature has been created and where it is. If
a software had been used to apply the signature, chances are, the same
software provides a way to verify the authenticity and integrity of the
file in question.

  1. This is not an exercise, its for work trying to create a test that
    will assure our files are signed.

The documentation which tells you that a file is signed (in a certain
way) should inform you at the same time, how the signature should be
verified. There is probably no need to program anything anew.

  1. I don’t understand this one :).

That is the crucial part. Do not get me wrong, but programming anything
is not half as important as understanding exactly this part of my
previous response. Constructing machinery or programming stuff is of no
use, before its uses are clear and well understood.

The way that your signature is created decides about anything that
follows. The way that your signature is distributed decides about the
usefulness of the whole procedure.

Thank you.

Cheerio.