Typically I've seen this when the MSI is signed but the signature is either invalid or it's not in a chain trusted by the machine in question. I do believe there is a push on the 4.x side to do away with certificate verification and instead utilize hashing.
If you are creating a bundle in 3.x that is using the MySQL MSI package, then I'd suggest just setting MSIPackage/SuppressSignatureVerification to yes if you are using Wix 3.8 or older. For Wix 3.9, Yes is the default value as described in the help file: By default, a Bundle will use the hash of a package to verify its contents. If this attribute is explicitly set to "no" and the package is signed with an Authenticode signature the Bundle will verify the contents of the package using the signature instead. Therefore, the default for this attribute could be considered to be "yes". It is unusual for "yes" to be the default of an attribute. In this case, the default was changed in WiX v3.9 after experiencing real world issues with Windows verifying Authenticode signatures. Since the Authenticode signatures are no more secure than hashing the packages directly, the default was changed. -----Original Message----- From: Nick Ramirez [mailto:nickra...@hotmail.com] Sent: Monday, July 14, 2014 9:02 PM To: wix-users@lists.sourceforge.net Subject: Re: [WiX-users] Bundle fails to verify signature of payload When installing the MySQL Installer MSI (it's an MSI that's trying to be a bootstrapper, but that's not the big problem at the moment with it). I'm getting the following errors: Failed authenticode verification of payload: C:\Users\Nicholas\AppData\Local\Package Cache\.unverified\mysql_installer_community_5.6.19.0.msi Error 0x80096010: Failed to verify signature of payload: mysql_installer_community_5.6.19.0.msi Does this typically mean that the MSI is not signed? In this case, is it just best to suppress it? -- View this message in context: http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Bundle-fails-to-verify-signature-of-payload-tp7593877p7595825.html Sent from the wix-users mailing list archive at Nabble.com. ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
