Once we have signed dlls, what do we need to change to verify them?

[catmanjan]

Im having trouble finding information on this because it used to work differently in dotnet framework

Signing works fine, secops love it blah blah

But from an application perspective, a signed exe doesnt verify that all dlls it’s using are signed for example… is there a modern guide on how to do that?

[kartheekp-ms]

Team Triage: There is no verification in Sign CLI today. We recognize that this is a gap but there are workarounds using other existing tools. For example, Windows signtool.exe can be used to verify the signed dlls.