sign msi

.appveyor.yml

@@ -1,5 +1,12 @@
 version: 1.0.{build}
 
+environment:
+  key_pass:
+    secure: UQOSEsEsXFmZvp1k18+7Lbd19NNPEEniq2euQgU0giz3OYHu0qWvQP9qecUayCtagAeG4C75RfwChkS2r+DjWZaePnr2OtPK46sM2pjXTx4=
+  pfx_key:
+    secure: qBgsWfnk50nFMs/Ft9T6lRx11eudnE17Z+paEtSJJ7tdn9F29Huy4rrw1bDjVC9LrmYch+09hZJm9WHGYuc4YuWPFBlvtngGqYsYD4r2gnQ=
+
+
 notifications:
   - provider: Slack
     incoming_webhook:
@@ -108,10 +115,19 @@ init:
     cd C:\projects\lbry
 
 install:
-- cmd: C:\Python27\python.exe setup.py install
+- ps: >-
+    C:\Python27\python.exe setup.py install
+
+    nuget install secure-file -ExcludeVersion
+
+    secure-file\tools\secure-file -decrypt "C:\projects\lbry\packaging\certs\pfx.enc" -secret %pfx_key% -out "C:\projects\lbry\packaging\certs\lbry.pfx"
 
 build_script:
-- cmd: C:\Python27\python.exe setup.py build bdist_msi
+- ps: >-
+    C:\Python27\python.exe setup.py build bdist_msi
+
+    signtool sign /f "C:\projects\lbry\packaging\certs\lbry.pfx" /p %key_pass% /tr http://tsa.starfieldtech.com /td SHA256 /fd SHA256 "C:\projects\lbry\dist\*.msi"
+
 
 test_script:
 - ps: >-
@@ -127,4 +143,4 @@ artifacts:
 - path: build/exe.win32-2.7/
   name: lbry-portable
 - path: packaging/windows/lbry-win32-app/LBRY-URI.reg
-  name: LBRY-URI
+  name: LBRY-URI