Code signing fails due to expired certificate?

Rhino Developer
1

I am trying to push a new version of a rhino plugin via yak but recently signing broke in my setup. I am not entirely sure but it appears that the mcneelcodesigning.zip linked from

https://developer.rhino3d.com/guides/rhinocommon/digitally-signing-plugins-for-zoo/

contains an expired CA certificate:

certutil -dump .\ca\ca.crt | Select-String "NotAfter"

NotAfter: 15/03/2026 22:19

Because MakePfxFile.bat uses:
openssl pkcs12 -export … -chain -CAfile ca\ca.crt

OpenSSL fails with:
Error getting chain: certificate has expired

I need to sign the plugin as it uses cloud zoo.

Thanks for an clarification!

4

Hi @Konrad,

Thanks. We also received your email.

Thanks,

– Dale

5

Thanks