Forum Discussion
Microsoft Store app package digest - SHA-384 support?
Hi There
Does the Windows Store support or plan to support appxbundles/appx/MSIX packages signed with SHA-384 digest? The documentation seems to restrict the hash algo to SHA-256 (https://learn.microsoft.com/en-us/windows/apps/publish/publish-your-app/msix/app-package-requirements) and this seems confirmed by messages produced when attempting to upload to the Windows Store:
Package acceptance validation error: The package MyPackage.appx uses an incorrect hash algorithm: http://www.w3.org/2001/04/xmldsig-more#sha384. Packages must use SHA-256 as the hash algorithm.
- I was hoping you'd get an official response from Microsoft, but here is something I can provide as an outsider.
I asked about SHA512 a while back. You can see response here: https://techcommunity.microsoft.com/t5/msix/certificate-requirements-question/m-p/2448689
My CA has stayed with 256 so I am guessing that 384 is an issue as well. If you paid for the cert the vendor should be willing to work with you and re-issue if you show them the documentation.Hi TIMOTHY_MANGAN ,s
Thanks - yeah heard back today that only SHA-256 digests are supported - no ETA for SHA-384 or > digest support available.
