I haven't seen this issue gitian building before, and had no issue running the signer for rc1. My gitian system shouldn't have changed between builds.
+ LANG=en_US.UTF-8
+ export LC_ALL=en_US.UTF-8
+ LC_ALL=en_US.UTF-8
+ umask 002
+ export OUTDIR=/home/ubuntu/out
+ OUTDIR=/home/ubuntu/out
+ GBUILD_BITS=64
+ MAKEOPTS=(-j2)
+ cd build/signature
+ git reset -q --hard
+ git clean -q -f -d
+ REFERENCE_DATETIME='2017-08-21 19:46:12'
+ REFERENCE_DATE=2017-08-21
+ REFERENCE_TIME=19:46:12
+ cd build
++ pwd
+ BUILD_DIR=/home/ubuntu/build
+ SIGDIR=/home/ubuntu/build/signature/win
+ UNSIGNED_DIR=/home/ubuntu/build/unsigned
+ sha256sum -c
+ echo 'f9a8cdb38b9c309326764ebc937cba1523a3a751a7ab05df3ecc99d18ae466c9 osslsigncode-1.7.1.tar.gz'
osslsigncode-1.7.1.tar.gz: OK
+ echo 'a8c4e9cafba922f89de0df1f2152e7be286aba73f78505169bc351a7938dd911 osslsigncode-Backports-to-1.7.1.patch'
+ sha256sum -c
osslsigncode-Backports-to-1.7.1.patch: OK
+ mkdir -p /home/ubuntu/build/unsigned
+ tar -C /home/ubuntu/build/unsigned -xf bitcoin-win-unsigned.tar.gz
+ tar xf osslsigncode-1.7.1.tar.gz
+ cd osslsigncode-1.7.1
+ patch -p1
patching file osslsigncode.c
+ ./configure --without-gsf --without-curl --disable-dependency-tracking
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... no
checking for mawk... mawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking for style of include used by make... GNU
checking dependency style of gcc... none
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking minix/config.h usability... no
checking minix/config.h presence... no
checking for minix/config.h... no
checking whether it is safe to define __EXTENSIONS__... yes
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking how to run the C preprocessor... gcc -E
checking whether ln -s works... yes
checking for a sed that does not truncate output... /bin/sed
checking whether make sets $(MAKE)... (cached) yes
checking for an ANSI C-conforming const... yes
checking for ANSI C header files... (cached) yes
checking whether time.h and sys/time.h may both be included... yes
checking sys/mman.h usability... yes
checking sys/mman.h presence... yes
checking for sys/mman.h... yes
checking for mmap... yes
checking windows.h usability... no
checking windows.h presence... no
checking for windows.h... no
checking for dlopen in -ldl... yes
checking termios.h usability... yes
checking termios.h presence... yes
checking for termios.h... yes
checking for getpass... yes
checking for OPENSSL... yes
checking for LIBCURL... no
checking for curl_easy_strerror in -lcurl... no
checking that generated files are newer than configure... done
configure: creating ./config.status
config.status: creating Makefile
config.status: creating config.h
config.status: executing depfiles commands
+ make
(CDPATH="${ZSH_VERSION+.}:" && cd . && /bin/bash /home/ubuntu/build/osslsigncode-1.7.1/missing autoheader)
rm -f stamp-h1
touch config.h.in
cd . && /bin/bash ./config.status config.h
config.status: creating config.h
config.status: config.h is unchanged
make all-am
make[1]: Entering directory `/home/ubuntu/build/osslsigncode-1.7.1'
gcc -DHAVE_CONFIG_H -I. -g -O2 -c -o osslsigncode.o osslsigncode.c
gcc -g -O2 -o osslsigncode osslsigncode.o -lcrypto
make[1]: Leaving directory `/home/ubuntu/build/osslsigncode-1.7.1'
+ find /home/ubuntu/build/unsigned -name '*-unsigned.exe'
+ read i
++ basename /home/ubuntu/build/unsigned/unsigned/bitcoin-0.15.0-win64-setup-unsigned.exe
+ INFILE=bitcoin-0.15.0-win64-setup-unsigned.exe
++ echo bitcoin-0.15.0-win64-setup-unsigned.exe
++ sed s/-unsigned//
+ OUTFILE=bitcoin-0.15.0-win64-setup.exe
+ ./osslsigncode attach-signature -in /home/ubuntu/build/unsigned/unsigned/bitcoin-0.15.0-win64-setup-unsigned.exe -out /home/ubuntu/out/bitcoin-0.15.0-win64-setup.exe -sigin /home/ubuntu/build/signature/win/bitcoin-0.15.0-win64-setup-unsigned.exe.pem
Signature mismatch.
Failed
Current PE checksum : 00DB1471
Calculated PE checksum: 00DB1471
Message digest algorithm : SHA1
Current message digest : 73AAB82BB3761BE13A9DC0ACAC0BD35AC51C48DC
Calculated message digest : 97C1D01159CAFD4144D22DDC8A1B39D391A69509 MISMATCH!!!
Signature verification: ok
Number of signers: 1
Signer [#0](/bitcoin-bitcoin/0/):
Subject: /C=US/postalCode=98104/ST=WA/L=Seattle/street=Ste 300/street=71 Columbia St/O=The Bitcoin Foundation, Inc./CN=The Bitcoin Foundation, Inc.
Issuer : /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA
Number of certificates: 4
Cert [#0](/bitcoin-bitcoin/0/):
Subject: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
Issuer : /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
Cert [#1](/bitcoin-bitcoin/1/):
Subject: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA
Issuer : /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
Cert [#2](/bitcoin-bitcoin/2/):
Subject: /C=US/postalCode=98104/ST=WA/L=Seattle/street=Ste 300/street=71 Columbia St/O=The Bitcoin Foundation, Inc./CN=The Bitcoin Foundation, Inc.
Issuer : /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA
Cert [#3](/bitcoin-bitcoin/3/):
Subject: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO SHA-1 Time Stamping Signer
Issuer : /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Object
