wix - digital signatures added by Insignia conflicting with PatchCertificates? -


i'm exploring feature of digital signatures in wix context (windows installer msi , windows patch msp).
in case i'm generating msi non-embedded "data1.cab".

to have understood important to:

  • sign external cabs
  • inscribe msi digital signatures of cabs
  • sign sign msi itself

i'm following official wix insignia documentation use in visual studio 2015:
in *.wixproj file have added following section.
additional command line parameters signtool.exe omitted brevity.

<import project="$(wixtargetspath)" /> <propertygroup>   <signoutput>true</signoutput> </propertygroup> <target name="signmsi">   <exec command="signtool.exe sign /a &quot;%(signmsi.fullpath)&quot;" /> </target> <target name="signcabs">   <exec command="signtool.exe sign /a &quot;%(signcabs.fullpath)&quot;" /> </target>

so far good.
also need patchcertificates future uac patches.
in *.wxs source file have:

<product ... > <package ... />  <media id="1" cabinet="data1.cab" embedcab="no"/>  <patchcertificates>   <digitalcertificate sourcefile="$(env.my_certificate_directory)/cert256.pem" id="patchcert"/> </patchcertificates>  </product>

when compile project in visual studio following error:

c:\program files (x86)\wix toolset v3.10\bin\insignia.exe -im c:\src\test\setup\obj\release\bin\myproduct.msi -out c:\src\test\setup\obj\release\bin\myproduct.msi insignia.exe(0,0): error insg0001: cannot find requested object. done building project "myinstaller.wixproj" -- failed.

--

observation:

  • both features on own working fine
  • but if combine 2 compilation fails

are incompatible each other?

--

additional keywords:

  • wix attributes: digitalcertificate, patchcertificates, digitalsignature
  • msi tables: msidigitalcertificate, msipatchcertificate, msidigitalsignature
  • general terms: digital certificate, digital signature, wix, insignia, votive, public key

--

update:
is maybe because of bug (see sourceforge, see github) (reported in 2013)?

i found solution.

i including certificate in pem format: 

<patchcertificates>   <digitalcertificate sourcefile="$(env.my_certificate_directory)/cert256.pem" id="patchcert"/> </patchcertificates>

but must use certificate in der format: 

<patchcertificates>   <digitalcertificate sourcefile="$(env.my_certificate_directory)/cert256_der.cer" id="patchcert"/> </patchcertificates>

also see related question: digitalcertificate (for uac patches) - format specification?

ps:
got on wrong track assuming bug or incompatibility because of specific error message not helpful @ all.
, it's strange error showing when combining both of features.


Comments

Post a Comment

Popular posts from this blog

javascript - Clear button on addentry page doesn't work -

this addentry blog page have made scratch , there underlying problems code particularly clear button supposed clear text entered when button clicked on doesn't work have saved html file problem. also 1 other problem submit button works doesn't pass of text index file have written php , reason whenever click on submit button redirects me index page without posting entry have made. <!doctype html> <html> <head> <script> function message() { alert("clear form?"); } </script> <style> body {background-color: beige;} h1 {color: black;} p {color: black;} textarea { width: 50%; height: 150px; padding: 12px 20px; box-sizing: border-box; border: 2px solid #ccc; border-radius: 4px; background-color: white; font-size: 16px; resize: none; } div { padding-left: 20px; } </style> </head> <meta charset="utf-8"> <link rel="stylesheet" href="....
Read more

python - Error: Unresolved reference 'selenium' What is the reason? -

# -*- coding: utf-8 -*- selenium import selenium import unittest, time, re class rc(unittest.testcase): def setup(self): self.verificationerrors = [] self.selenium = selenium("localhost", 4444, "*chrome", "http://stackoverflow.com/") self.selenium.start() def test_rc(self): sel = self.selenium sel.open("/") sel.type("id=kw", "selenium") sel.click("id=container") sel.click("id=su") def teardown(self): self.selenium.stop() self.assertequal([], self.verificationerrors) if __name__ == "__main__": unittest.main() this recorded selenium ide, selenium remote control code. in ide test passed.   in pycharm open, first line ( from selenium import selenium ) there error: unresolved reference 'selenium' what reason? my environment is python3.5 selenium3.3.1 selenium-server-standalone-...
Read more

tensorflow when input_data MNIST_data , zlib.error: Error -3 while decompressing: invalid block type -

i'm geting started tensorflow,followed tutorials,but cannot download mnist data. import tensorflow tf tensorflow.examples.tutorials.mnist import input_data mnist=input_data.read_data_sets("mnist_data/",one_hot=true) print("download done!") error information: extracting mnist_data/train-images-idx3-ubyte.gz traceback (most recent call last): file "/home/sj/program/tesorflow_try.py", line 6, in <module> mnist=input_data.read_data_sets("mnist_data/",one_hot=true) file "/usr/local/lib/python2.7/dist-packages/tensorflow/contrib/learn/python/learn/datasets/mnist.py", line 213, in read_data_sets train_images = extract_images(f) file "/usr/local/lib/python2.7/dist-packages/tensorflow/contrib/learn/python/learn/datasets/mnist.py", line 60, in extract_images buf = bytestream.read(rows * cols * num_images) file "/usr/lib/python2.7/gzip.py", line 268, in read self._read(readsize) file...
Read more