Burn uses the Windows certificate store to validate the signature, so you can right click on the MSI and go to the Digital Signatures tab and see what Windows says about whether the signature is valid.
For 3.9, the default for SuppressSignatureVerification is supposed to be "yes", but that doesn't seem to be working for packages right now ( http://wixtoolset.org/issues/4468/). On Mon, Jul 14, 2014 at 9:17 PM, Hoover, Jacob <jacob.hoo...@greenheck.com> wrote: > Typically I've seen this when the MSI is signed but the signature is > either invalid or it's not in a chain trusted by the machine in question. I > do believe there is a push on the 4.x side to do away with certificate > verification and instead utilize hashing. > > If you are creating a bundle in 3.x that is using the MySQL MSI package, > then I'd suggest just setting MSIPackage/SuppressSignatureVerification to > yes if you are using Wix 3.8 or older. For Wix 3.9, Yes is the default > value as described in the help file: > > By default, a Bundle will use the hash of a package to verify its > contents. If this attribute is explicitly set to "no" and the package is > signed with an Authenticode signature the Bundle will verify the contents > of the package using the signature instead. Therefore, the default for this > attribute could be considered to be "yes". It is unusual for "yes" to be > the default of an attribute. In this case, the default was changed in WiX > v3.9 after experiencing real world issues with Windows verifying > Authenticode signatures. Since the Authenticode signatures are no more > secure than hashing the packages directly, the default was changed. > > -----Original Message----- > From: Nick Ramirez [mailto:nickra...@hotmail.com] > Sent: Monday, July 14, 2014 9:02 PM > To: wix-users@lists.sourceforge.net > Subject: Re: [WiX-users] Bundle fails to verify signature of payload > > When installing the MySQL Installer MSI (it's an MSI that's trying to be a > bootstrapper, but that's not the big problem at the moment with it). I'm > getting the following errors: > > Failed authenticode verification of payload: > C:\Users\Nicholas\AppData\Local\Package > Cache\.unverified\mysql_installer_community_5.6.19.0.msi > > Error 0x80096010: Failed to verify signature of payload: > mysql_installer_community_5.6.19.0.msi > > Does this typically mean that the MSI is not signed? In this case, is it > just best to suppress it? > > > > -- > View this message in context: > http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Bundle-fails-to-verify-signature-of-payload-tp7593877p7595825.html > Sent from the wix-users mailing list archive at Nabble.com. > > > ------------------------------------------------------------------------------ > Want fast and easy access to all the code in your enterprise? Index and > search up to 200,000 lines of code with a free copy of Black Duck Code > Sight - the same software that powers the world's largest code search on > Ohloh, the Black Duck Open Hub! Try it now. > http://p.sf.net/sfu/bds > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > ------------------------------------------------------------------------------ > Want fast and easy access to all the code in your enterprise? Index and > search up to 200,000 lines of code with a free copy of Black Duck > Code Sight - the same software that powers the world's largest code > search on Ohloh, the Black Duck Open Hub! Try it now. > http://p.sf.net/sfu/bds > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
