HLKX + Google KMS = ♥

This tool is for signing HLKX files using Google KMS, asymmetric sign.

Requirements:

• .NET 8+ (SDK and runtime)
• Docker (optional)

Build:

mkdir build
dotnet publish src/OpenVsixSignTool/OpenVsixSignTool.csproj -c Release -o ./build

To sign a HLKX file, you need a public leaf certificate, a JSON file with credentials and a key ring string given from Google KMS service. This tools supports work with service accounts only.

Usage:

cd build
OpenVsixSignTool sign -cf certificate.cer -gcf credentials.json -gks projects/<project_id>/locations/global/keyRings/<key_ring>/cryptoKeys/<crypto_keys>/cryptoKeyVersions/1 <file_to_sign>.hlkx

Use run.ps1 or run.sh to run it via Docker. See Dockerfile for more information.

This fork is based on:

1. Original Tool VsixSignTool
2. An open-source implemention OpenOpcSignTool
3. HLKX and Azure fork