[wix-devs] Suggestion: New predefined variable for Burn Bundle: Sha2Supported

[Tobias Erichsen]

As no new SHA1 certificates are given out anymore, unfortunately this is not an option...

________________________________
Von: Hoover, Jacob [mailto:Jacob.Hoover at greenheck.com]
Gesendet: Freitag, 6. März 2020 17:00
An: WiX Toolset Developer Mailing List
Cc: Tobias Erichsen
Betreff: RE: Suggestion: New predefined variable for Burn Bundle: Sha2Supported

Isn't that what dual signing is for?

From: wix-devs [mailto:wix-devs-bounces at lists.wixtoolset.org] On Behalf Of Tobias Erichsen via wix-devs
Sent: Thursday, March 5, 2020 9:11 PM
To: wix-devs at lists.wixtoolset.org
Cc: Tobias Erichsen <info at tobias-erichsen.de>
Subject: [wix-devs] Suggestion: New predefined variable for Burn Bundle: Sha2Supported

Hi there,

I know that Windows 7 is dead, but there are quite a few people out there still
running those, especially version that have not been upgraded to support SHA2.

As those W7 installations cannot currently receive any updates after the update
servers have been updated to only support SHA2, I was wondering if it would
be possible to include a variable "Sha2Supported" which will check for availability
of KB 3033929.

So depending on this variable, I could either install an old version of my driver
(SHA1-signed) or issue a warning to manually install KB3033929...

On Github there is a simple check available for SHA2 compatiblity:
https://gist.github.com/navossoc/7572c7d82243e9f818989e2765e7793a

What do you think about that proposal?

Best regards,
Tobias
____________________________________________________________________
WiX Toolset Developer Mailing List provided by FireGiant http://www.firegiant.com/<http://www.firegiant.com>
NOTE: This email was received from an external source. Please use caution when opening links or attachments in the message.