http://bugs.winehq.org/show_bug.cgi?id=16420
--- Comment #18 from Jamie Jim.Cooper@sas.com 2008-12-12 10:22:03 --- signcode.exe works fine under Windoze XP SP1, Windoze Server 2003, Windoze Server 2008, Windoze Vista, ... with the certificate I have.
One can only assume that Windoze doesn't really pay attention to the flags you are looking at, or they are decoded differently, or... whatever.
The example command line I gave (minus the "wine " prefix) is working fine in a production system on Windoze, that signs many tens of thousands of objects every night... peak for a 24 hour period (so far) is ~40,000 signing transactions. The majority of those are Jar signing transactions, which don't use signcode, but there are still hundreds (to thousands, at peak) uses of signcode every night, with no failures.
The rest of my client/server system is all custom Java code. If I could get rid of signcode altogether, I would be a happy camper. I would be _almost_ as happy if I could run signcode with Wine, and run it all on a Linux server.