title: SignTool Not Signing ClickOnce App Using SHA256, Only Uses SHA1
body: <p>I'm trying to sign my clickonce app.  I have an EV code signing certificate that is using SHA256.  The problem is that when I sign my app using the post build commands, it seems to be using SHA1 instead of SHA256.  Here is a clip of the output window:</p>
  
  <pre><code>Running Code Analysis...
  1&gt;  Code Analysis Complete -- 0 error(s), 0 warning(s)
  1&gt;  The following certificate was selected:
  1&gt;      Issued to: Certificate Subject Name Here
  1&gt;  
  1&gt;      Issued by: DigiCert EV Code Signing CA (SHA2)
  1&gt;  
  1&gt;      Expires:   Thu Apr 14 06:00:00 2016
  1&gt;  
  1&gt;      SHA1 hash: HASH-HERE
  1&gt;  
  1&gt;  
  1&gt;  Done Adding Additional Store
  1&gt;  Successfully signed and timestamped: C:\Users\AnyBody\Documents\Visual Studio 2013\Projects\My Project\Project Folder\obj\x86\My Configuration\MyProgram.exe
  1&gt;  
  1&gt;  
  1&gt;  Number of files successfully Signed: 1
  1&gt;  
  1&gt;  Number of warnings: 0
  1&gt;  
  1&gt;  Number of errors: 0
  </code></pre>
  
  <p>Here is the post build command I am using:</p>
  
  <pre><code>"C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool.exe" sign /fd SHA256 /t "http://timestamp.digicert.com" /n "Certificate Subject Name Here" /v "$(ProjectDir)obj\x86\$(ConfigurationName)\$(TargetFileName)"
  </code></pre>
  
  <p>I can see that MyProgram.exe.deploy has the digital signature attached when I look at the file's properties.</p>
  
  <p>There are no errors returned when i run signtool /verify</p>
  
  <p>When I try to launch the app, I get the error "Application validation did not succeed. Unable to continue".</p>
  
  <p>In the details of the error message, there is this line:</p>
  
  <pre><code>+ File, MyProgram.exe, has a different computed hash than specified in manifest.
  </code></pre>
  
  <p>When I open and look at the manifest, the hash for MyProgram.exe is specified as SHA256</p>
  
  <p>What could be the problem?  What is making signtool refuse to use SHA256?  From what I've read, it should be using SHA256 by default.</p>
  
  <p>I have unistalled/reinstalled visual studio, windows sdk, all installed .net libraries to no avail.</p>
  
  <p>I'm really hoping someone has some idea...</p>