I use the following in the setup project (this ofcourse happens once for
x64 and after that for x86)
<Target Name="SignCabs">
<Exec Command='"Signtool.exe" sign /i "digi" /t "
http://timestamp.digicert.com"; "%(SignCabs.FullPath)"' />
</Target>
<Target Name="SignMsi">
<Exec Command=""signtool.exe" sign /i "digi" /t
"http://timestamp.digicert.com" "%(SignMsi.FullPath)""
/>
</Target>
and the following in the bootstrapper project
<Target Name="SignBundleEngine">
<Exec Command=""signtool.exe" sign /i "digi" /t
"http://timestamp.digicert.com" "@(SignBundleEngine)""
/>
</Target>
<Target Name="SignBundle">
<Exec Command=""signtool.exe" sign /i "digi" /t
"http://timestamp.digicert.com" "@(SignBundle)"" />
</Target>
Perhaps I would need to find a way to sign all the cab files together with
a single signtool command. That would take care of the timestamp issue?
On Fri, Aug 1, 2014 at 9:12 PM, Hoover, Jacob <jacob.hoo...@greenheck.com>
wrote:
> Yes, and because of this burn is including the appropriate CABS. Are you
> using the existing WiX build events to sign the MSI and CABS? I do believe
> the events are timed such that MSBuild isn't going to trigger a rebuild if
> CAB caching is enabled for the project.
>
> -----Original Message-----
> From: Ashish Agarwal [mailto:ash...@mangoapps.com]
> Sent: Friday, August 01, 2014 10:07 AM
> To: General discussion about the WiX toolset.
> Subject: Re: [WiX-users] Installer size doubles up if signed
>
> The checksum of the cabs before signing are the same but after signing
> they become different.
> Could this be because we are including the timestamps in the signature
> using a timestamp server and as they get signed at slightly different
> times(in the build process) the timestamps and as a result signatures
> differ?
> On Aug 1, 2014 10:23 AM, "Hoover, Jacob" <jacob.hoo...@greenheck.com>
> wrote:
>
> > If you build your 32 bit and 64 bit MSI's, and then compare the
> > checksums of the cabs, are they different?
> >
> > -----Original Message-----
> > From: John Cooper [mailto:jocoo...@jackhenry.com]
> > Sent: Thursday, July 31, 2014 11:13 PM
> > To: General discussion about the WiX toolset.
> > Subject: Re: [WiX-users] Installer size doubles up if signed
> >
> > I sign all of my MSI's and Burn bundles. I only see a few K
> > difference, so something is seriously wrong. How do these MSI's look in
> Orca?
> > --
> > John Merryweather Cooper
> > Build & Install Engineer - ESA
> > Jack Henry & Associates, Inc.(r)
> > Shawnee Mission, KS 66227
> > Office: 913-341-3434 x791011
> > jocoo...@jackhenry.com
> > www.jackhenry.com
> >
> > ________________________________________
> > From: Ashish Agarwal [ash...@mangoapps.com]
> > Sent: Thursday, July 31, 2014 10:14 PM
> > To: General discussion about the WiX toolset.
> > Subject: [WiX-users] Installer size doubles up if signed
> >
> > Hi,
> > We are in the process of migrating to Wix from the old Visual Studio
> > installer and are hitting an issue.
> > We use a single setup project that runs once in 32 bit mode and once
> > in 64 bit to generate two MSI files. These are then packaged together
> using Burn.
> >
> > When the external cab files are not signed (but the MSIs and final
> > setup exe is) the final exe generated by the bootstrapper is ~50MB.
> > However, if we decide to sign the external cabs as well before
> > creating the bundle the final setup size becomes 100MB.
> >
> > We would ideally like to sign the Cab files. Any pointers on what can
> > be done?
> >
> > --
> >
> > ------------------------------
> > At MangoApps <http://www.mangoapps.com> we specialize in social
> > collaboration platforms for mid-size companies (100-5,000 users). You
> > can find more information, including 5 case studies and lots of
> > current customer reviews here: MangoApps Dossier <
> > http://download.mangoapps.com/documents/MangoAppsDossier_Hires.pdf>
> > ------------------------------
> >
> > ----------------------------------------------------------------------
> > -------- Want fast and easy access to all the code in your enterprise?
> > Index and search up to 200,000 lines of code with a free copy of Black
> > Duck Code Sight - the same software that powers the world's largest
> > code search on Ohloh, the Black Duck Open Hub! Try it now.
> > http://p.sf.net/sfu/bds
> > _______________________________________________
> > WiX-users mailing list
> > WiX-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/wix-users
> > NOTICE: This electronic mail message and any files transmitted with it
> > are intended exclusively for the individual or entity to which it is
> addressed.
> > The message, together with any attachment, may contain confidential
> > and/or privileged information.
> > Any unauthorized review, use, printing, saving, copying, disclosure or
> > distribution is strictly prohibited. If you have received this message
> > in error, please immediately advise the sender by reply email and
> > delete all copies.
> >
> >
> >
> > ----------------------------------------------------------------------
> > -------- Want fast and easy access to all the code in your enterprise?
> > Index and search up to 200,000 lines of code with a free copy of Black
> > Duck Code Sight - the same software that powers the world's largest
> > code search on Ohloh, the Black Duck Open Hub! Try it now.
> > http://p.sf.net/sfu/bds
> > _______________________________________________
> > WiX-users mailing list
> > WiX-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/wix-users
> >
> >
> > ----------------------------------------------------------------------
> > -------- Want fast and easy access to all the code in your enterprise?
> > Index and search up to 200,000 lines of code with a free copy of Black
> > Duck Code Sight - the same software that powers the world's largest
> > code search on Ohloh, the Black Duck Open Hub! Try it now.
> > http://p.sf.net/sfu/bds
> > _______________________________________________
> > WiX-users mailing list
> > WiX-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/wix-users
> >
>
> --
>
> ------------------------------
> At MangoApps <http://www.mangoapps.com> we specialize in social
> collaboration platforms for mid-size companies (100-5,000 users). You can
> find more information, including 5 case studies and lots of current
> customer reviews here: MangoApps Dossier <
> http://download.mangoapps.com/documents/MangoAppsDossier_Hires.pdf>
> ------------------------------
>
> ------------------------------------------------------------------------------
> Want fast and easy access to all the code in your enterprise? Index and
> search up to 200,000 lines of code with a free copy of Black Duck Code
> Sight - the same software that powers the world's largest code search on
> Ohloh, the Black Duck Open Hub! Try it now.
> http://p.sf.net/sfu/bds
> _______________________________________________
> WiX-users mailing list
> WiX-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
>
> ------------------------------------------------------------------------------
> Want fast and easy access to all the code in your enterprise? Index and
> search up to 200,000 lines of code with a free copy of Black Duck
> Code Sight - the same software that powers the world's largest code
> search on Ohloh, the Black Duck Open Hub! Try it now.
> http://p.sf.net/sfu/bds
> _______________________________________________
> WiX-users mailing list
> WiX-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
--
------------------------------
At MangoApps <http://www.mangoapps.com> we specialize in social
collaboration platforms for mid-size companies (100-5,000 users). You can
find more information, including 5 case studies and lots of current
customer reviews here: MangoApps Dossier
<http://download.mangoapps.com/documents/MangoAppsDossier_Hires.pdf>
------------------------------
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users
