[Lazarus] Can Lazarus/FPC sign the created executables (Windows)?

[Michael Van Canneyt]

On Tue, 24 Sep 2024, Bo Berglund via lazarus wrote:

> I have run into a problem where certain customers require the applications to be
> "signed" and now I wonder if there is an option somewhere in Lazarus or FPC to
> do that when building an app?
>
> If so how does one go about it?
>
> Googling brings up stuff about Windows SDK etc, but I want to stay with FPC if
> possible....
>
> Has someone here already done this and can share the way to do it?

Signing needs to be done outside of the compiler.

Lazarus can probably make a nice GUI for it and do the signing after the
compile step is finished, but it is not part of the compiling step.

It's just a matter of executing the windows "signtool" with the correct options.
(and the signtool is indeed part of the SDK, so you will need it in each
case)

Michael.