I have played around with signing my msi. If the signature is broken then windows will show a different message to the user. But the message is not suited well for my "incomplete download" case.
If the user opens a downloaded msi with a valid digital signature then "Open file - Security warning" dialog is displayed. If the signature of the msi is invalid then the same dialog appears with a little bit different message. It says something like: "This file does not have a valid digital signature that verifies its publisher". If the msi is not downloaded from the internet then this dialog is not even displayed! The windows message is useful only to the educated user who knows what code signing is and can figure out that the problem might be caused by an incomplete download. My experience shows that users don't think that much over a relatively often displayed dialog. I could write my own digital signature verification and give a more descriptive message but this would lead me to write my own bootstrapper. I ended up with embedding my msi into a NSIS installer. This way I have integrity check and the name of the msi is fixed also. On Oct 20, 2010, at 10:55 AM, Rob Mensching wrote: > MSI files can also be signed. > > On Wed, Oct 6, 2010 at 5:47 AM, Peter Shirtcliffe <pshirtcli...@sdl.com>wrote: > >> Many utilities that create self extracting archive will include such a >> function. It will also help you avoid the problem where MSIs downloaded from >> the web are renamed by the browser, which causes them to break - you arent >> allowed to rename an MSI. >> >> -----Original Message----- >> From: Gáspár Gyozo [mailto:ggy...@freemail.hu] >> Sent: 06 October 2010 13:12 >> To: wix-users@lists.sourceforge.net >> Subject: [WiX-users] Installer Integrity Check >> >> I have created a single msi installation package that is meant to be >> downloaded over the internet. How can I verify that the downloaded package >> is intact? >> >> I would like to have a feature similar to NSIS's. When the downloaded >> package is damaged it gives a message like: >> >> Installer Integrity check has failed. Common causes include incomplete >> download and damaged media. >> >> ------------------------------------------------------------------------------ >> Beautiful is writing same markup. Internet Explorer 9 supports >> standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. >> Spend less time writing and rewriting code and more time creating great >> experiences on the web. Be a part of the beta today. >> http://p.sf.net/sfu/beautyoftheweb >> _______________________________________________ >> WiX-users mailing list >> WiX-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/wix-users >> SDL PLC confidential, all rights reserved. >> If you are not the intended recipient of this mail SDL requests and >> requires that you delete it without acting upon or copying any of its >> contents, and we further request that you advise us. >> SDL PLC is a public limited company registered in England and Wales. >> Registered number: 02675207. >> Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 >> 7DY, UK. >> >> ------------------------------------------------------------------------------ >> Beautiful is writing same markup. Internet Explorer 9 supports >> standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. >> Spend less time writing and rewriting code and more time creating great >> experiences on the web. Be a part of the beta today. >> http://p.sf.net/sfu/beautyoftheweb >> _______________________________________________ >> WiX-users mailing list >> WiX-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/wix-users >> > > > > -- > virtually, Rob Mensching - http://RobMensching.com LLC > ------------------------------------------------------------------------------ > Download new Adobe(R) Flash(R) Builder(TM) 4 > The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly > Flex(R) Builder(TM)) enable the development of rich applications that run > across multiple browsers and platforms. Download your free trials today! > http://p.sf.net/sfu/adobe-dev2dev > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Download new Adobe(R) Flash(R) Builder(TM) 4 The new Adobe(R) Flex(R) 4 and Flash(R) Builder(TM) 4 (formerly Flex(R) Builder(TM)) enable the development of rich applications that run across multiple browsers and platforms. Download your free trials today! http://p.sf.net/sfu/adobe-dev2dev _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
