<Content Include="coder.ico" />

<PropertyGroup>

<AssemblyName>Coder.Desktop.Installer</AssemblyName>

<RootNamespace>Coder.Desktop.Installer</RootNamespace>

<OutputType>Exe</OutputType>

<TargetFramework>net481</TargetFramework>

<LangVersion>13.0</LangVersion>

</PropertyGroup>

<ItemGroup>

<None Remove="*.msi" />

<None Remove="*.exe" />

<None Remove="*.wxs" />

<None Remove="*.wixpdb" />

<None Remove="*.wixobj" />

</ItemGroup>

<ItemGroup>

<PackageReference Include="WixSharp_wix4" Version="2.6.0" />

<PackageReference Include="WixSharp_wix4.bin" Version="2.6.0" />

<PackageReference Include="CommandLineParser" Version="2.9.1" />

</ItemGroup>

// Add registry values that are consumed by the manager. Note that these

// should not be changed. See Vpn.Service/Program.cs and

// Vpn.Service/ManagerConfig.cs for more details.

@"[INSTALLFOLDER]coder-desktop-service.log"),

new RegValue(RegistryHive, RegistryKey, "Manager:TunnelBinarySignatureSigner", "Coder Technologies Inc."),

new RegValue(RegistryHive, RegistryKey, "Manager:TunnelBinaryAllowVersionMismatch", "false"));

This repo contains the C# source code for Coder Desktop for Windows. You can

download the latest version from the GitHub releases.

You will need:

- Visual Studio 2022

- .NET desktop development

- WinUI application development

- Windows 10 SDK (10.0.19041.0)

- Wix Toolset 5.0.2 (if building the installer)

It's also recommended to use JetBrains Rider (or VS + ReSharper) for a better

experience.

The Coder Desktop for Windows source is licensed under the GNU Affero General

Public License v3.0 (AGPL-3.0).

Some vendored files in this repo are licensed separately. The license for these

files can be found in the same directory as the files.

The binary distributions of Coder Desktop for Windows have some additional

license disclaimers that can be found in

[scripts/files/License.txt](scripts/files/License.txt) or during installation.

using System.Reflection;

using System.Security.Cryptography.X509Certificates;

var testBinaryPath = Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "hello.exe");

var ex = Assert.ThrowsAsync<Exception>(() =>

AuthenticodeDownloadValidator.Coder.ValidateAsync(testBinaryPath, ct));

Assert.That(ex.Message,

Does.Contain(

"File is not signed and trusted with an Authenticode signature: State=Unsigned, StateReason=None"));

var testBinaryPath =

Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "hello-self-signed.exe");

var ex = Assert.ThrowsAsync<Exception>(() =>

AuthenticodeDownloadValidator.Coder.ValidateAsync(testBinaryPath, ct));

Assert.That(ex.Message,

Does.Contain(

"File is not signed and trusted with an Authenticode signature: State=Unsigned, StateReason=UntrustedRoot"));

// rundll32.exe uses a catalog file for its signature.

AuthenticodeDownloadValidator.Coder.ValidateAsync(@"C:\Windows\System32\rundll32.exe", ct));

[Test(Description = "Test a binary signed by a non-EV certificate")]

[CancelAfter(30_000)]

public void NonEvCert(CancellationToken ct)

{

// dotnet.exe is signed by .NET. During tests we can be pretty sure

// this is installed.

var ex = Assert.ThrowsAsync<Exception>(() =>

AuthenticodeDownloadValidator.Coder.ValidateAsync(@"C:\Program Files\dotnet\dotnet.exe", ct));

Assert.That(ex.Message,

Does.Contain(

"File is not signed with an Extended Validation Code Signing certificate"));

}

[Test(Description = "Test a binary signed by an EV certificate with a different name")]

public void EvDifferentCertName(CancellationToken ct)

var testBinaryPath = Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata",

"hello-versioned-signed.exe");

var ex = Assert.ThrowsAsync<Exception>(() =>

new AuthenticodeDownloadValidator("Acme Corporation").ValidateAsync(testBinaryPath, ct));

Assert.That(ex.Message,

Does.Contain(

"File is signed by an unexpected certificate: ExpectedName='Acme Corporation', ActualName='Coder Technologies Inc.'"));

var testBinaryPath = Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata",

"hello-versioned-signed.exe");

await AuthenticodeDownloadValidator.Coder.ValidateAsync(testBinaryPath, ct);

}

[Test(Description = "Test if the EV check works")]

public void IsEvCert()

{

// To avoid potential API misuse the function is private.

var method = typeof(AuthenticodeDownloadValidator).GetMethod("IsExtendedValidationCertificate",

BindingFlags.NonPublic | BindingFlags.Static);

Assert.That(method, Is.Not.Null, "Could not find IsExtendedValidationCertificate method");

// Call it with various certificates.

var certs = new List<(string, bool)>

{

// EV:

(Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "coder-ev.crt"), true),

(Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "google-llc-ev.crt"), true),

(Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "self-signed-ev.crt"), true),

// Not EV:

(Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "mozilla-corporation.crt"), false),

(Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "self-signed.crt"), false),

};

foreach (var (certPath, isEv) in certs)

{

var x509Cert = new X509Certificate2(certPath);

var result = (bool?)method!.Invoke(null, [x509Cert]);

Assert.That(result, Is.Not.Null,

$"IsExtendedValidationCertificate returned null for {Path.GetFileName(certPath)}");

Assert.That(result, Is.EqualTo(isEv),

$"IsExtendedValidationCertificate returned wrong result for {Path.GetFileName(certPath)}");

}

var testBinaryPath = Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "hello.exe");

var ex = Assert.ThrowsAsync<Exception>(() =>

new AssemblyVersionDownloadValidator(1, 2, 3, 4).ValidateAsync(testBinaryPath, ct));

Assert.That(ex.Message, Does.Contain("File ProductVersion is empty or null"));

}

[Test(Description = "Invalid version on binary")]

[CancelAfter(30_000)]

public void InvalidVersion(CancellationToken ct)

{

var testBinaryPath =

Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata", "hello-invalid-version.exe");

var ex = Assert.ThrowsAsync<Exception>(() =>

new AssemblyVersionDownloadValidator(1, 2, 3, 4).ValidateAsync(testBinaryPath, ct));

Assert.That(ex.Message, Does.Contain("File ProductVersion '1-2-3-4' is not a valid version string"));

[Test(Description = "Version mismatch with full version check")]

public void VersionMismatchFull(CancellationToken ct)

var testBinaryPath = Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata",

"hello-versioned-signed.exe");

// Try changing each version component one at a time

var expectedVersions = new[] { 1, 2, 3, 4 };

for (var i = 0; i < 4; i++)

{

var testVersions = (int[])expectedVersions.Clone();

testVersions[i]++; // Increment this component to make it wrong

var ex = Assert.ThrowsAsync<Exception>(() =>

new AssemblyVersionDownloadValidator(

testVersions[0], testVersions[1], testVersions[2], testVersions[3]

).ValidateAsync(testBinaryPath, ct));

Assert.That(ex.Message, Does.Contain(

$"File ProductVersion does not match expected version: Actual='1.2.3.4', Expected='{string.Join(".", testVersions)}'"));

}

[Test(Description = "Version match with and without partial version check")]

var testBinaryPath = Path.Combine(TestContext.CurrentContext.TestDirectory, "testdata",

"hello-versioned-signed.exe");

// Test with just major.minor

await new AssemblyVersionDownloadValidator(1, 2).ValidateAsync(testBinaryPath, ct);

// Test with major.minor.patch

await new AssemblyVersionDownloadValidator(1, 2, 3).ValidateAsync(testBinaryPath, ct);

// Test with major.minor.patch.build

await new AssemblyVersionDownloadValidator(1, 2, 3, 4).ValidateAsync(testBinaryPath, ct);

<ItemGroup>

<None Update="testdata\hello.exe">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\hello-invalid-version.exe">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\hello-self-signed.exe">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\hello-versioned-signed.exe">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\coder-ev.crt">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\google-llc-ev.crt">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\mozilla-corporation.crt">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\self-signed.crt">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

<None Update="testdata\self-signed-ev.crt">

<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>

</None>

</ItemGroup>

$errorActionPreference = "Stop"

Set-Location $PSScriptRoot

if (-not (Test-Path "hello.go")) {

$helloGo = @"

Set-Content -Path "hello.go" -Value $helloGo

}

& go.exe build -ldflags '-w -s' -o hello.exe hello.go

if ($LASTEXITCODE -ne 0) { throw "Failed to build hello.exe" }

Copy-Item hello.exe hello-invalid-version.exe

& go-winres.exe patch --in winres.json --delete --no-backup --product-version 1-2-3-4 --file-version 1-2-3-4 hello-invalid-version.exe

if ($LASTEXITCODE -ne 0) { throw "Failed to patch hello-invalid-version.exe with go-winres" }

Copy-Item hello.exe hello-self-signed.exe

$helloSelfSignedPath = (Get-Item hello-self-signed.exe).FullName

$certStoreLocation = "Cert:\CurrentUser\My"

$password = "password"

$cert = New-SelfSignedCertificate `

-CertStoreLocation $certStoreLocation `

-DnsName coder.com `

-Subject "CN=coder-desktop-windows-self-signed-cert" `

-Type CodeSigningCert `

-KeyUsage DigitalSignature `

-NotAfter (Get-Date).AddDays(3650)

$pfxPath = Join-Path $PSScriptRoot "cert.pfx"

try {

$securePassword = ConvertTo-SecureString -String $password -Force -AsPlainText

Export-PfxCertificate -Cert $cert -FilePath $pfxPath -Password $securePassword

# Sign hello-self-signed.exe with the self signed certificate

& "${env:ProgramFiles(x86)}\Windows Kits\10\bin\10.0.19041.0\x64\signtool.exe" sign /debug /f $pfxPath /p $password /tr "http://timestamp.digicert.com" /td sha256 /fd sha256 $helloSelfSignedPath

if ($LASTEXITCODE -ne 0) { throw "Failed to sign hello-self-signed.exe with signtool" }

} finally {

if ($cert.Thumbprint) {

Remove-Item -Path (Join-Path $certStoreLocation $cert.Thumbprint) -Force

}

if (Test-Path $pfxPath) {

Remove-Item -Path $pfxPath -Force

}

}

Copy-Item hello.exe hello-versioned-signed.exe

& go-winres.exe patch --in winres.json --delete --no-backup --product-version 1.2.3.4 --file-version 1.2.3.4 hello-versioned-signed.exe

if ($LASTEXITCODE -ne 0) { throw "Failed to patch hello-versioned-signed.exe with go-winres" }

Write-Host "Don't forget to sign hello-versioned-signed.exe with the EV cert!"