Sign windows (#1698)

* Add Code signing to binaries before packaging

* Sign depending on what was built

appveyor.yml

@@ -25,6 +25,14 @@ build:
   parallel: true
   verbosity: minimal
 after_build:
+- ps: |
+    $path = Join-Path -Path "$env:TMP" -ChildPath csc.p12
+    [IO.File]::WriteAllBytes($path, [Convert]::FromBase64String($env:CSC_LINK))
+    Set-AppveyorBuildVariable -Name 'CSC_LINK' -Value $path
+- cmd: |
+    "C:\Program Files (x86)\Microsoft SDKs\Windows\v7.1A\Bin\signtool.exe" sign /a /ph /tr http://timestamp.digicert.com /td sha256 /fd sha256 /f "%CSC_LINK%" /p "%CSC_KEY_PASSWORD%" "%APPVEYOR_BUILD_FOLDER%/%CONFIGURATION%/*.exe"
+- ps: Remove-Item env:CSC_KEY_PASSWORD
+- ps: Remove-Item -Path $env:CSC_LINK
 - cmd: >-
     cpack -C %CONFIGURATION% --verbose --config ./CPackConfig.cmake