From 3a0d9f07a8844111f80dd58fd4b2cbd30f1781b8 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Wed, 22 Feb 2017 14:21:33 -0500
Subject: [PATCH] Windows: update SHA2 timestamp server

The RFC 3161 Service SHA128: https://timestamp.geotrust.com/tsa
is being decommissioned at the end of March 2017.  A new SHA256 service:
http://sha256timestamp.ws.symantec.com/sha256/timestamp
takes its place.

Change-Id: Iaf3de7ce7ccdd5c2589e80a7e4accccb307228d3
---
 windows/NTMakefile.w32 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/NTMakefile.w32 b/windows/NTMakefile.w32
index 1a35af9b0..316d76b68 100644
--- a/windows/NTMakefile.w32
+++ b/windows/NTMakefile.w32
@@ -513,7 +513,7 @@ SIGNTOOL=signtool.exe
 SIGNTOOL_T=http://timestamp.verisign.com/scripts/timstamp.dll
 !endif
 !ifndef SIGNTOOL_T_SHA256
-SIGNTOOL_T_SHA256=http://timestamp.geotrust.com/tsa
+SIGNTOOL_T_SHA256=http://sha256timestamp.ws.symantec.com/sha256/timestamp
 !endif
 
 _CODESIGN=( $(SIGNTOOL) sign /fd sha1 $(SIGNTOOL_O) /t $(SIGNTOOL_T) $(SIGNTOOL_C) /v $@ )