[wix-users] Code Integrity validation triggered at firewall.dll and winca.dll

[Rob Mensching]

There is no NuGet for WiX v3.

---
Short replies here. Complete answers here: https://www.firegiant.com/services/

-----Original Message-----
From: Masato Maeda <Masato.Maeda at microsoft.com> 
Sent: Tuesday, May 26, 2020 8:58 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Cc: Rob Mensching <rob at firegiant.com>
Subject: RE: Code Integrity validation triggered at firewall.dll and winca.dll

Nuget package is code signed but individual content of nuget such as EXEs and DLLs look like not code signed.
If a file is code signed, it should show "Digital Signatures" tab at properties view of the file. For example, firewall.dll and winca.dll are not code signed.

Thanks,
Masato

-----Original Message-----
From: wix-users <wix-users-bounces at lists.wixtoolset.org> On Behalf Of Rob Mensching via wix-users
Sent: Tuesday, May 26, 2020 8:17 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Cc: Rob Mensching <rob at firegiant.com>
Subject: [EXTERNAL] Re: [wix-users] Code Integrity validation triggered at firewall.dll and winca.dll

Those files are signed in WiX v3.11.2

---
Short replies here. Complete answers here: https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.firegiant.com%2Fservices%2F&data=02%7C01%7CMasato.Maeda%40microsoft.com%7C45b4e6df42f44ff5033508d801ec6c8b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637261462231359029&sdata=8St%2FaHYta9%2BjV7uQ8vnPmzWhcYgYRTAq2OIuKWndfaA%3D&reserved=0

-----Original Message-----
From: wix-users <wix-users-bounces at lists.wixtoolset.org> On Behalf Of Masato Maeda via wix-users
Sent: Tuesday, May 26, 2020 8:14 PM
To: wix-users at lists.wixtoolset.org
Cc: Masato Maeda <Masato.Maeda at microsoft.com>
Subject: [wix-users] Code Integrity validation triggered at firewall.dll and winca.dll

Hi,

Our team is using Wix Toolset to build MSI. There is high security Microsoft Windows environment with enhanced Code Integrity policy. All deploying binaries must be code signed. This includes temporary DLL that runs during custom action execution. I have signed CustomActionLibrary before and after run MakeSfxCA.exe. But native extension libraries caused integrity error such as firewall.dll and winca.dll. Is there a way to repack them after digitally signed?

Thanks,
Masato



____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.firegiant.com%2F&data=02%7C01%7CMasato.Maeda%40microsoft.com%7C45b4e6df42f44ff5033508d801ec6c8b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637261462231359029&sdata=QtczUva0IxNBpnhyglNAasY5dRI4fEAkC8HWP%2BfWdHg%3D&reserved=0

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.firegiant.com%2F&data=02%7C01%7CMasato.Maeda%40microsoft.com%7C45b4e6df42f44ff5033508d801ec6c8b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637261462231369025&sdata=mX2fxT%2F11vsHHT1P0A0PcI9Bk27P6tHgJKQjFzTgUME%3D&reserved=0