[wix-users] signed bootstrapper exe failing to extract

[Edwin Castro]

The process described Rick is the process you want.

1. build msi
2. sign msi externally
3. build bundle
4. sign bundle (this is a multi-step process)
   a. use insignia to detach engine.exe from bootstrapper.exe
   b. sign engine.exe externally
   c. use insignia to attach engine.exe into bootstrapper.exe
   d. sign bootstrapper.exe externally

I have used this process very successfully with embedded/compressed MSIs.

Perhaps you mean something else by compressed?

--
Edwin G. Castro


On Thu, Feb 6, 2020, 10:28 Derek Wetherall via wix-users <
wix-users at lists.wixtoolset.org> wrote:

>   thanks.
>
> to be clear,
> our process (mandated) is
>
> build msi
> sign msi externally
> build bundle
> sign bundle externally (e.g. setup.exe)
>
> this won't install if compressed
>
> how would i use insignia here?  Do need to use it to detach the bundle.exe
> and sign that after signing the msi, but creating the bundle and before
> signing the final setup.exe ?
>
> On Thu, 6 Feb 2020 at 14:34, Rick Papo <rpapo at comcast.net> wrote:
>
> > In very broad strokes, drawn from code we actually use and with the names
> > changed to protect the innocent...
> >
> >         "c:\program files (x86)\wix toolset v3.14\bin\insignia.exe" -ib
> > BOOTSTRAPPER.exe -o engine.exe
> >
> >         Sign engine.exe
> >
> >         "c:\program files (x86)\wix toolset v3.14\bin\insignia.exe" -ab
> > engine.exe BOOTSTRAPPER.exe -o BOOTSTRAPPER.exe
> >
> >         erase engine.exe
> >
> >         Sign BOOTSTRAPPER.exe
> >
> > Substitute your sign utility and the version of INSIGNIA.exe.  Use
> whatever
> > name you want for "engine.exe".
> >
> > -----Original Message-----
> > From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On
> Behalf
> > Of
> > Derek Wetherall via wix-users
> > Sent: Thursday, February 6, 2020 9:09 AM
> > To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
> > Cc: Derek Wetherall <derek.wetherall at gmail.com>
> > Subject: [wix-users] signed bootstrapper exe failing to extract
> >
> > Dear experts,
> > i have a digitally signed bootstrapper executable that works absolutely
> > fine
> > if uncompressed, but if we compress the msi it failed with...
> >
> > Error 0x80070001: Failed to extract all files from container, erf: 1:2:0
> >
> > for security reasons we have to sign the executable outside of wix.
> >
> > Has anyone seen this before?
> > I see references on the net to signing the engine as well.
> > Is this the issue?
> >
> > ____________________________________________________________________
> > WiX Toolset Users Mailing List provided by FireGiant
> > http://www.firegiant.com/
> >
> >
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>