神经病win10无法验证数字签名

又㕛后续补充

莫名其妙重启了几次系统后，又出现了该问题，同时驱动不能加载了，呵呵呵呵，驱动装好之后，我什么都没干过(2019/04/02)

又后续补充

在最新的系统更新后，该问题消失(2019/04/01)

后续补充：

该问题并不影响驱动安装和驱动的正常工作！！。。

 

win10给一个驱动程序打签名，签名阶段无异常，/v /kp验证之后提示 SignTool Error: The signing certificate is not valid for the requested usage.

具体错误如下

Signature Index: 0 (Primary Signature)
Hash of file (sha1): BAB4732B81ACDFA1861CFD2ABEE106959EBB3F37

Signing Certificate Chain:
    Issued to: VeriSign Class 3 Public Primary Certification Authority - G5
    Issued by: VeriSign Class 3 Public Primary Certification Authority - G5
    Expires:   Thu Jul 17 07:59:59 2036
    SHA1 hash: 4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5

        Issued to: VeriSign Class 3 Code Signing 2010 CA
        Issued by: VeriSign Class 3 Public Primary Certification Authority - G5
        Expires:   Sat Feb 08 07:59:59 2020
        SHA1 hash: 495847A93187CFB8C71F840CB7B41497AD95C64F

            Issued to:
            Issued by: VeriSign Class 3 Code Signing 2010 CA
            Expires:   Wed Jul 03 07:59:59 2019
            SHA1 hash: 7262BFB6C91AC074D0FBD64023C941C1343689C9

The signature is timestamped: Sat Feb 16 12:04:48 2019
Timestamp Verified by:
    Issued to: Thawte Timestamping CA
    Issued by: Thawte Timestamping CA
    Expires:   Fri Jan 01 07:59:59 2021
    SHA1 hash: BE36A4562FB2EE05DBB3D32323ADF445084ED656

        Issued to: Symantec Time Stamping Services CA - G2
        Issued by: Thawte Timestamping CA
        Expires:   Thu Dec 31 07:59:59 2020
        SHA1 hash: 6C07453FFDDA08B83707C09B82FB3D15F35336B1

            Issued to: Symantec Time Stamping Services Signer - G4
            Issued by: Symantec Time Stamping Services CA - G2
            Expires:   Wed Dec 30 07:59:59 2020
            SHA1 hash: 65439929B67973EB192D6FF243E6767ADF0834E4

SignTool Error: The signing certificate is not valid for the requested usage.

检查了2个证书，增强用法均包含内核签名用法1.3.6.1.5.5.7.3.3，所以证书是没问题的

最后发现问题出在win10操作系统，不知道这个系统抽了什么疯，在其他版本系统验证没问题。

Hash of file (sha1): BAB4732B81ACDFA1861CFD2ABEE106959EBB3F37

Signing Certificate Chain:
    Issued to: VeriSign Class 3 Public Primary Certification Authority - G5
    Issued by: VeriSign Class 3 Public Primary Certification Authority - G5
    Expires:   Thu Jul 17 07:59:59 2036
    SHA1 hash: 4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5

        Issued to: VeriSign Class 3 Code Signing 2010 CA
        Issued by: VeriSign Class 3 Public Primary Certification Authority - G5
        Expires:   Sat Feb 08 07:59:59 2020
        SHA1 hash: 495847A93187CFB8C71F840CB7B41497AD95C64F

            Issued to:
            Issued by: VeriSign Class 3 Code Signing 2010 CA
            Expires:   Wed Jul 03 07:59:59 2019
            SHA1 hash: 7262BFB6C91AC074D0FBD64023C941C1343689C9

The signature is timestamped: Sat Feb 16 12:02:47 2019
Timestamp Verified by:
    Issued to: Thawte Timestamping CA
    Issued by: Thawte Timestamping CA
    Expires:   Fri Jan 01 07:59:59 2021
    SHA1 hash: BE36A4562FB2EE05DBB3D32323ADF445084ED656

        Issued to: Symantec Time Stamping Services CA - G2
        Issued by: Thawte Timestamping CA
        Expires:   Thu Dec 31 07:59:59 2020
        SHA1 hash: 6C07453FFDDA08B83707C09B82FB3D15F35336B1

            Issued to: Symantec Time Stamping Services Signer - G4
            Issued by: Symantec Time Stamping Services CA - G2
            Expires:   Wed Dec 30 07:59:59 2020
            SHA1 hash: 65439929B67973EB192D6FF243E6767ADF0834E4

Cross Certificate Chain:
    Issued to: Microsoft Code Verification Root
    Issued by: Microsoft Code Verification Root
    Expires:   Sat Nov 01 21:54:03 2025
    SHA1 hash: 8FBE4D070EF8AB1BCCAF2A9D5CCAE7282A2C66B3

        Issued to: VeriSign Class 3 Public Primary Certification Authority - G5
        Issued by: Microsoft Code Verification Root
        Expires:   Tue Feb 23 03:35:17 2021
        SHA1 hash: 57534CCC33914C41F70E2CBB2103A1DB18817D8B

            Issued to: VeriSign Class 3 Code Signing 2010 CA
            Issued by: VeriSign Class 3 Public Primary Certification Authority - G5
            Expires:   Sat Feb 08 07:59:59 2020
            SHA1 hash: 495847A93187CFB8C71F840CB7B41497AD95C64F

                Issued to:
                Issued by: VeriSign Class 3 Code Signing 2010 CA
                Expires:   Wed Jul 03 07:59:59 2019
                SHA1 hash: 7262BFB6C91AC074D0FBD64023C941C1343689C9


Successfully verified

 

不知道这是什么问题呢？