[wix-users] WIX package with extensions support using Sha2 algorithm

[Rob Mensching]

Note: SHA-1 *is* supported everywhere. SHA-2 support requires at least one patch on Win7.

As for your question, can you please be more specific. If this is about the signing of the DifxApp  custom action DLLs, they are SHA-1 hashed by Microsoft. If you want those files signed by Microsoft with SHA-2 then you'll need to follow up with Microsoft. We don't actually build those DLLs (unfortunately, we've asked a couple times to manage the code but Microsoft has kept it to themselves).

-----Original Message-----
From: wix-users <wix-users-bounces at lists.wixtoolset.org> On Behalf Of manish duggal via wix-users
Sent: Sunday, May 16, 2021 10:18 AM
To: 'WiX Toolset Users Mailing List' <wix-users at lists.wixtoolset.org>
Cc: duggal_sunny at yahoo.com
Subject: [wix-users] WIX package with extensions support using Sha2 algorithm

Hello Team,

 

I am looking for a WIX package supporting Sha2 signed WIX extensions. Per the current updates, as I see over web and in my company, Sha1 is not a strong hashing algorithm anymore:
https://www.thesslstore.com/blog/difference-sha-1-sha-2-sha-256-hash-algorit
hms/ and thus it is not recommended/supported everywhere. Our installer and patches have dependency on DiFxApp
(https://wixtoolset.org/documentation/manual/v3/xsd/difxapp/driver.html) and we are using 3.14 WIX package.

 

I thought to open a feature request on github for Sha2 support in WIX, however the triage indicates to first send email to the alias. So trying my luck here first:)

 

Appreciate your help in this ask.

 

Thx

Manish 


____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/