Well, the peanut gallery is back.

> Wow, no faith from the peanut gallery.

> If the file is signed (something else we calculate during build when
> referencing the file) we will use the signature of the file not the
hash. If
> the signature on the file changed in between the point that you built
and
> the user downloaded the actual file, chances are the user has a file
you
> don't want them installing. <smile/>

I understand your reasoning and even agree with it for the most part;
however, I just checked my Bootstrapper directory and indeed there is
not a file for the DotNet 3.5SP1 or Client installs (amongst others).  I
do see that the product.xml file has PublicKey listed for each
PackageFile.  That seems to be MUCH desirable to having to have a local
copy of the file on the system that builds the BA.

As you think about this issue, please consider that it would be beyond
wonderful if WiX could use the same input (to define a file and its
download) that the "GenerateBootstrapper" action uses so that we do not
have to reinvent the wheel every time MS releases a new package.  


----------------------------------------------------------------------
Roy Chastain


------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to