I've been signing and deploying for several years now, but with the latest 
release I've ran into a strange problem. The first error complains about a 
difference in size between the certificate in the CAB verses what's in the 
package.  The second error is a bit comical complaining that the digital 
signature is invalid, but WinVerifyTrust returned 0.  If I peek into the 
Package Cache, looking at the CAB and the MSI, both show as having a valid 
digital signature.  Using Orca and extracting the certificate embedded in the 
MSI shows the same certificate which is valid.

Log Below:

MSI (s) (B0:2C) [15:41:26:011]: Validating digital signature of file 
'C:\ProgramData\Package 
Cache\{6A07C6E2-08CD-4F38-BF9D-38332A4DA077}v4.13.1.0\payload\AFC.cab'
MSI (s) (B0:2C) [15:41:27:007]: Certificate of signed file 
'C:\ProgramData\Package 
Cache\{6A07C6E2-08CD-4F38-BF9D-38332A4DA077}v4.13.1.0\payload\AFC.cab' differs 
in size with the certificate authored in the package
MSI (s) (B0:34) [15:41:27:007]: Note: 1: 1330 2: C:\ProgramData\Package 
Cache\{6A07C6E2-08CD-4F38-BF9D-38332A4DA077}v4.13.1.0\payload\AFC.cab 3: 0
MSI (s) (B0:34) [15:41:27:007]: Note: 1: 2205 2:  3: Error
MSI (s) (B0:34) [15:41:27:007]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` 
FROM `Error` WHERE `Error` = 1330
MSI (s) (B0:34) [16:59:59:459]: Note: 1: 2205 2:  3: Error
MSI (s) (B0:34) [16:59:59:459]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` 
FROM `Error` WHERE `Error` = 1709
MSI (s) (B0:34) [16:59:59:459]: Product: FOO -- Error 1330. A file that is 
required cannot be installed because the cabinet file C:\ProgramData\Package 
Cache\{6A07C6E2-08CD-4F38-BF9D-38332A4DA077}v4.13.1.0\payload\AFC.cab has an 
invalid digital signature.  This may indicate that the cabinet file is corrupt. 
 Error 0 was returned by WinVerifyTrust.

Note, on the build machine I have the certificate in the store so the selection 
is automatic.

  <Target Name="SignCabs" DependsOnTargets="UsesSignTool">
    <Exec Command="&quot;$(SignToolPath)&quot; sign /t 
http://timestamp.digicert.com /a &quot;%(SignCabs.FullPath)&quot;" />
  </Target>

  <Target Name="SignMsi" DependsOnTargets="UsesSignTool">
    <Exec Command="&quot;$(SignToolPath)&quot; sign /d &quot;FOO Setup&quot; /t 
http://timestamp.digicert.com /a &quot;%(SignMsi.FullPath)&quot;" />
  </Target>

Thanks,
Jacob

------------------------------------------------------------------------------
Android apps run on BlackBerry 10
Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
Now with support for Jelly Bean, Bluetooth, Mapview and more.
Get your Android app in front of a whole new audience.  Start now.
http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to