[wix-users] signed bootstrapper exe failing to extract

[Rick Papo]

I left out the MSI signing step from this description, as I was only concerned with the bootstrapper in my response.  In truth, we build our components, sign everything that can be signed, then build our MSI and VSIX packages and sign both of them, then build the bootstrapper.  We extract the core of the bootstrapper and sign that, then reinsert it into the bootstrapper.  Only then do we sign the bootstrapper itself.

 

It works for us.

 

From: Derek Wetherall [mailto:derek.wetherall at gmail.com] 
Sent: Thursday, February 6, 2020 9:49 AM
To: Rick Papo <rpapo at comcast.net>
Cc: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] signed bootstrapper exe failing to extract

 

  thanks. 

 

to be clear,

our process (mandated) is

 

build msi

sign msi externally

build bundle

sign bundle externally (e.g. setup.exe)

 

this won't install if compressed 

 

how would i use insignia here?  Do need to use it to detach the bundle.exe and sign that after signing the msi, but creating the bundle and before signing the final setup.exe ?

 

On Thu, 6 Feb 2020 at 14:34, Rick Papo <rpapo at comcast.net <mailto:rpapo at comcast.net> > wrote:

In very broad strokes, drawn from code we actually use and with the names
changed to protect the innocent...

        "c:\program files (x86)\wix toolset v3.14\bin\insignia.exe" -ib
BOOTSTRAPPER.exe -o engine.exe

        Sign engine.exe

        "c:\program files (x86)\wix toolset v3.14\bin\insignia.exe" -ab
engine.exe BOOTSTRAPPER.exe -o BOOTSTRAPPER.exe

        erase engine.exe

        Sign BOOTSTRAPPER.exe

Substitute your sign utility and the version of INSIGNIA.exe.  Use whatever
name you want for "engine.exe".

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org <mailto:wix-users-bounces at lists.wixtoolset.org> ] On Behalf Of
Derek Wetherall via wix-users
Sent: Thursday, February 6, 2020 9:09 AM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org <mailto:wix-users at lists.wixtoolset.org> >
Cc: Derek Wetherall <derek.wetherall at gmail.com <mailto:derek.wetherall at gmail.com> >
Subject: [wix-users] signed bootstrapper exe failing to extract

Dear experts,
i have a digitally signed bootstrapper executable that works absolutely fine
if uncompressed, but if we compress the msi it failed with...

Error 0x80070001: Failed to extract all files from container, erf: 1:2:0

for security reasons we have to sign the executable outside of wix.

Has anyone seen this before?
I see references on the net to signing the engine as well.
Is this the issue?

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant
http://www.firegiant.com/