[wix-users] DetectCondition for MsuPackage for KB3033929

Fri Sep 16 12:30:24 PDT 2016

Thanks for the link. We install one service and 3 drivers with our
installation, so it is always permachine and elevated. The bal:Condition
was exactly what I was looking for!!

Regards,
Mridul.

On Fri, Sep 16, 2016 at 8:00 AM, Douglas, Keith (STATCAN) <
keith.douglas at canada.ca> wrote:

> That's right: we've been doing this for quite a while. It works well
> enough, though of course it has to be a permachine and hence elevated
> thing. (We have a service which handles our installations automagically.)
>
>
>
>
> Keith Douglas
>
> Programmer Analyst, Collection Systems Division
> Statistics Canada / Government of Canada
> Keith.Douglas at canada.ca / Tel : 613-854-5589
>
> Programmeur analyste, Division des systèmes de collecte
> Statistique Canada / Gouvernenment du Canada
> Keith.Douglas at canada.ca / Tél :613-854-5589
>
>
> -----Original Message-----
> From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf
> Of John Cooper
> Sent: September-15-16 5:08 PM
> To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
> Subject: Re: [wix-users] DetectCondition for MsuPackage for KB3033929
>
> I think you can put the MSU in a bundle.  In an MSI isn't going to work.
>
> --
> John Merryweather Cooper
> Senior Software Engineer -- Integration Development Group -- Enterprise
> Notification Service
> Jack Henry & Associates, Inc.® | Lenexa, KS  66214 | Office:
> 913-341-3434x431050
> JoCooper at jackhenry.com
>
>
>
>
>
> -----Original Message-----
> From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf
> Of Mridul Pentapalli
> Sent: Thursday, September 15, 2016 3:56 PM
> To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
> Subject: Re: [wix-users] DetectCondition for MsuPackage for KB3033929
>
> The e-mail below is from an external source.  Please do not open
> attachments or click links from an unknown or suspicious origin.
>
> Thank Phill Hogland for the comments. Since we provide software for the
> general public, I want to force them to install the .msu. There are a
> significant number of current users who are on Win 7 and our customers are
> not generally very tech savvy. It would be terrible since we have already
> taken their money and they will no longer be able to use the software they
> paid for. We also require NetFx45 as a prerequisite anyway. We can always
> bump it up to 461 if we see problems. I have fixed issues with customers
> not having the correct root certificates in the past with our current
> drivers, so I don't see that as a stumbling block.
>
> Thanks Rob Mensching for your comments too. We have been using globalsign
> for the past few years and we updated it recently. I doubt my boss is
> interested in switching over just to get a SHA1 certificate for what is
> going to be a diminishing problem.
>
> So is there any way to put a DetectCondition? Alternately is there any
> other way that I can incorporate installing this particular MSU file and
> then chain my current .MSI?
>
> Thanks,
> Mridul.
>
>
>
> On Thu, Sep 15, 2016 at 3:23 PM, Rob Mensching <rob at firegiant.com> wrote:
>
> > I highly recommend DigiCert (https://www.digicert.com/). They support
> > SHA1 for this very reason and reissues are free.
> >
> > In fact, I just had to go through the process to reissue for a SHA1 to
> > dual-sign FireGiant's newly launched WiX Expansion Pack (
> > https://www.firegiant.com/products/wix-expansion-pack/).
> >
> > If you want 25% off your order, send me a direct email and I'll send
> > you a referral (I don't care about the Amazon gift card they send, if
> > 25% off is what it takes to get you to a better certificate provider
> <smile/>).
> >
> > _____________________________________________________________
> >  Short replies here. Complete answers over there:
> > http://www.firegiant.com/
> >
> >
> > -----Original Message-----
> > From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On
> > Behalf Of Phill Hogland
> > Sent: Thursday, September 15, 2016 1:10 PM
> > To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
> > Subject: Re: [wix-users] DetectCondition for MsuPackage for KB3033929
> >
> > We ship SHA2 signed packages, as we no longer have a SHA1 and the
> > vendor would not renew it prior to it expiring.  I believe that there
> > may be issues with using the SHA1 after 1/2017.
> >
> >
> > We have many Win7 "isolated" network users, and we often have users
> > who report installing KB3033929 but still cannot run a setup that is
> > SHA2 signed.  Sometimes they can resolve it by also updating their
> > root certificates.  Other times they cannot find any solution.
> > Recently users have reported resolving this problem by installing
> > either NetFx452 or
> > NetFx461 (even if they already have NetFx45 which is the minimum we
> > require).   I have not tried to integrate the msu into my bundles because
> > of the inconsistency in resolving the issue.  We referrer users to
> > Microsoft Support, but it has been a real pain because of the prior
> > releases related to KB3033929 which broke certain systems.
> >
> > ________________________________
> > From: wix-users <wix-users-bounces at lists.wixtoolset.org> on behalf of
> > Tyler Gustafson <tgustafson at solacom.com>
> > Sent: Thursday, September 15, 2016 12:40:19 PM
> > To: WiX Toolset Users Mailing List
> > Subject: Re: [wix-users] DetectCondition for MsuPackage for KB3033929
> >
> > Ouch, sorry to hear that.
> > Personally I would document the problem away at this point or possibly
> > look for another way to get the SHA-1 certificate back instead of
> > having my installer tell the customer they need Windows Updates.
> > If you really want to go that route I'm not any more helpful than
> > Google on this topic but maybe someone else on here has more
> > experience with WiX and .msu
> >
> > -----Original Message-----
> > From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On
> > Behalf Of Mridul Pentapalli
> > Sent: September-15-16 11:42 AM
> > To: WiX Toolset Users Mailing List
> > Subject: Re: [wix-users] DetectCondition for MsuPackage for KB3033929
> >
> > That is true, until you find that your SHA-1 certificate expired last
> > week and that your certificate provider no longer provides SHA-1
> > certificates any more. We were dual signing our drivers until last week.
> >
> > Mridul.
> >
> > ____________________________________________________________________
> > WiX Toolset Users Mailing List provided by FireGiant
> > http://www.firegiant.com/
> >
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>
> NOTICE: This electronic mail message and any files transmitted with it are
> intended
> exclusively for the individual or entity to which it is addressed. The
> message,
> together with any attachment, may contain confidential and/or privileged
> information.
> Any unauthorized review, use, printing, saving, copying, disclosure or
> distribution
> is strictly prohibited. If you have received this message in error, please
> immediately advise the sender by reply email and delete all copies.
>
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>