diff --git a/contrib/build-wine/sign.sh b/contrib/build-wine/sign.sh
index 83cb7196a..bed42edff 100755
--- a/contrib/build-wine/sign.sh
+++ b/contrib/build-wine/sign.sh
@@ -20,9 +20,14 @@ mkdir -p signed >/dev/null 2>&1
 
 cd dist
 echo "Found $(ls *.exe | wc -w) files to sign."
+
+echo -n "Windows codesign passphrase:"
+read -s password
+
 for f in $(ls *.exe); do
     echo "Signing $f..."
     osslsigncode sign \
+      -pass $password\
       -h sha256 \
       -certs "$CERT_FILE" \
       -key "$KEY_FILE" \
diff --git a/contrib/release.sh b/contrib/release.sh
index 3c26e6e7a..76762e29a 100755
--- a/contrib/release.sh
+++ b/contrib/release.sh
@@ -105,7 +105,11 @@ if test -f "dist/$win1"; then
     info "file exists: $win1"
 else
     pushd .
-    ./contrib/build-wine/build.sh
+    if test -f "contrib/build-wine/dist/$win1"; then
+	info "unsigned file exists: $win1"
+    else
+	./contrib/build-wine/build.sh
+    fi
     cd contrib/build-wine/
     if [ ! -z "$RELEASEMANAGER" ] ; then
         ./sign.sh