Update Azure Trusted Signing configuration.

Signed-off-by: Anders Kaseorg <anders@zulip.com>

package.json

@@ -121,11 +121,16 @@
         }
       ],
       "icon": "build/icon.ico",
-      "publisherName": "Kandra Labs, Inc.",
+      "signtoolOptions": {
-      "sign": "./scripts/win-sign.js",
+        "publisherName": "Kandra Labs, Inc."
-      "signingHashAlgorithms": [
+      },
-        "sha256"
+      "azureSignOptions": {
-      ]
+        "endpoint": "https://eus.codesigning.azure.net/",
+        "codeSigningAccountName": "kandralabs",
+        "certificateProfileName": "kandralabs",
+        "timestampRfc3161": "http://timestamp.acs.microsoft.com",
+        "timestampDigest": "SHA256"
+      }
     },
     "msi": {
       "artifactName": "${productName}-${version}-${arch}.${ext}"

scripts/win-sign.js

@@ -1,20 +0,0 @@
-"use strict";
-
-const childProcess = require("node:child_process");
-const {promisify} = require("node:util");
-
-const exec = promisify(childProcess.exec);
-
-exports.default = async ({path, hash}) => {
-  await exec(
-    `powershell.exe Invoke-TrustedSigning \
--Endpoint https://eus.codesigning.azure.net/ \
--CodeSigningAccountName kandralabs \
--CertificateProfileName kandralabs \
--Files '${path}' \
--FileDigest '${hash}' \
--TimestampRfc3161 http://timestamp.acs.microsoft.com \
--TimestampDigest '${hash}'`,
-    {stdio: "inherit"},
-  );
-};