From c103495d097b193350851161a3d6adc55a065dee Mon Sep 17 00:00:00 2001
From: Steve Dower <steve.dower@python.org>
Date: Thu, 8 May 2025 20:22:13 +0100
Subject: [PATCH] Ensure SigningCertificate is correctly passed to MSI build

---
 windows-release/azure-pipelines.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/windows-release/azure-pipelines.yml b/windows-release/azure-pipelines.yml
index d0705249..e2fbdd2a 100644
--- a/windows-release/azure-pipelines.yml
+++ b/windows-release/azure-pipelines.yml
@@ -228,7 +228,8 @@ stages:
           BuildToPackage: ${{ parameters.BuildToPackage }}
           DoARM64: ${{ parameters.DoARM64}}
           DoFreethreaded: ${{ parameters.DoFreethreaded }}
-          SigningCertificate: ${{ parameters.SigningCertificate }}
+          ${{ if and(parameters.SigningCertificate, ne(parameters.SigningCertificate, 'Unsigned')) }}:
+            SigningCertificate: ${{ parameters.SigningCertificate }}
     - ${{ if eq(parameters.DoMSIX, 'true') }}:
       - template: stage-pack-msix.yml
         parameters: