[wix-users] How to sign selective MSI packages in a bundle

Thu May 26 07:01:47 PDT 2022

If you use the SignMsi target, then you can use whatever signing tool you want and the MSI installers will be signed both inside the bundle and on disk wherever they built to.  You just have to define the relevant targets in each .wixproj that you want signed.

Zac

From: wix-users <wix-users-bounces at lists.wixtoolset.org> On Behalf Of Chuck Caldwell via wix-users
Sent: Thursday, May 26, 2022 9:17 AM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Cc: Chuck Caldwell <Chuck.Caldwell at WellSky.com>
Subject: Re: [wix-users] How to sign selective MSI packages in a bundle

You can sign the bundles and the engine in the bundle with signtool and insignia, but, you can't get the MSI's within the bundle. At least, not as far as I know. Chuck -----Original Message----- From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-bounces at lists.wixtoolset.org>>
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender
This message came from outside your organization. Use caution when opening.
ZjQcmQRYFpfptBannerEnd

You can sign the bundles and the engine in the bundle with signtool and insignia, but, you can't get the MSI's within the bundle. At least, not as far as I know.

Chuck

-----Original Message-----

From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-bounces at lists.wixtoolset.org>> On Behalf Of Tigran Galoyan via wix-users

Sent: Thursday, May 26, 2022 8:57 AM

To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>>

Cc: Tigran Galoyan <tigran.galoyan at gmail.com<mailto:tigran.galoyan at gmail.com>>

Subject: Re: [wix-users] How to sign selective MSI packages in a bundle

CAUTION: External Sender

I wonder though if there is a way to sign the MSIs after the build is complete and the artifacts (the bundle setup executables are generated)?

On Wed, May 25, 2022 at 5:10 PM Rob Mensching via wix-users < wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>> wrote:

> Just to be clear (and pedantic): You do not need to sign MSIs that

> ship in a bundle. The bundle should suffice.

>

> -----Original Message-----

> From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-bounces at lists.wixtoolset.org>> On Behalf Of

> Rob Mensching via wix-users

> Sent: Wednesday, May 25, 2022 2:09 PM

> To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>>

> Cc: Rob Mensching <rob at firegiant.com<mailto:rob at firegiant.com>>

> Subject: Re: [wix-users] How to sign selective MSI packages in a

> bundle

>

> You sign MSIs the same as everything. In a .wixproj, you can override

> the `SignMsi` target to call out to signtool or whatever tooling

> you're using to sign.

>

>

>

> - - - - - - - - - - - - - - -

> I provide short answers on wix-users. Full commercial support is

> offered by FireGiant at

> https://urldefense.proofpoint.com/v2/url?u=https-3A__nam11.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Fwww.f&d=DwICAg&c=9mghv0deYPYDGP-W745IEdQLV1kHpn4XJRvR6xMRXtA&r=Hblpuym5RtUs_4R6qwcviv7o1-X2VNe9YBkPtiuw4mw&m=-H0iKMdVLj7F2_cUMFYVuY64UG2g_hIOVi9oRUPlb2HOHLjB-GH7-Z2MFU_pywo4&s=G1Fdp-tzkYrWerAYl8ejPZqMmCmejAIFAdPK7FPYyeI&e=

> iregiant.com%2Fservices&data=05%7C01%7Cchuck.caldwell%40wellsky.co

> m%7Cda87ff635a414cf5cb6508da3f173717%7C15d19784ad584a57a66fad1c0f826a4

> 5%7C0%7C0%7C637891666194540649%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjA

> wMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&am

> p;sdata=w8W7Vr%2BbLnqnvQHrJL9NOvCsUBbc6vPKHciDLsKwKnQ%3D&reserved=

> 0

>

> -----Original Message-----

> From: wix-users <wix-users-bounces at lists.wixtoolset.org<mailto:wix-users-bounces at lists.wixtoolset.org>> On Behalf Of

> Tigran Galoyan via wix-users

> Sent: Wednesday, May 25, 2022 2:04 PM

> To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org<mailto:wix-users at lists.wixtoolset.org>>

> Cc: Tigran Galoyan <tigran.galoyan at gmail.com<mailto:tigran.galoyan at gmail.com>>

> Subject: [wix-users] How to sign selective MSI packages in a bundle

>

> Hi,

>

> We sign our setup executables at the very end of the build process

> (first the engine then the bundle itself). However, since the bundles

> consist of many other MSI-s that we produce then when we try later

> after installation to launch some applications installed with those

> MSI packages, then if the launch requires elevated privileges then UAC

> pops up the window where it states that the publisher is unknown.

> Apparently, the setup executable itself is signed and shows the correct publisher.

>

> How can we also sign the MSI packages (no all that are in a bundle,

> but those that we generate) that later our applications show the

> correct publisher at launch time (in the UAC popup)?

>

> Thanks,

> Tigran

>

> ____________________________________________________________________

> WiX Toolset Users Mailing List provided by FireGiant

> https://urldefense.proofpoint.com/v2/url?u=https-3A__nam11.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Fwww.f&d=DwICAg&c=9mghv0deYPYDGP-W745IEdQLV1kHpn4XJRvR6xMRXtA&r=Hblpuym5RtUs_4R6qwcviv7o1-X2VNe9YBkPtiuw4mw&m=-H0iKMdVLj7F2_cUMFYVuY64UG2g_hIOVi9oRUPlb2HOHLjB-GH7-Z2MFU_pywo4&s=G1Fdp-tzkYrWerAYl8ejPZqMmCmejAIFAdPK7FPYyeI&e=

> iregiant.com%2F&data=05%7C01%7Cchuck.caldwell%40wellsky.com%7Cda87

> ff635a414cf5cb6508da3f173717%7C15d19784ad584a57a66fad1c0f826a45%7C0%7C

> 0%7C637891666194540649%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ

> QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=

> %2BglvkeLMuGfxA4sa%2FDWBYVSFaUiRejK5xu4060%2F%2FIvs%3D&reserved=0

>

> ____________________________________________________________________

> WiX Toolset Users Mailing List provided by FireGiant

> https://urldefense.proofpoint.com/v2/url?u=https-3A__nam11.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Fwww.f&d=DwICAg&c=9mghv0deYPYDGP-W745IEdQLV1kHpn4XJRvR6xMRXtA&r=Hblpuym5RtUs_4R6qwcviv7o1-X2VNe9YBkPtiuw4mw&m=-H0iKMdVLj7F2_cUMFYVuY64UG2g_hIOVi9oRUPlb2HOHLjB-GH7-Z2MFU_pywo4&s=G1Fdp-tzkYrWerAYl8ejPZqMmCmejAIFAdPK7FPYyeI&e=

> iregiant.com%2F&data=05%7C01%7Cchuck.caldwell%40wellsky.com%7Cda87

> ff635a414cf5cb6508da3f173717%7C15d19784ad584a57a66fad1c0f826a45%7C0%7C

> 0%7C637891666194540649%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ

> QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=

> %2BglvkeLMuGfxA4sa%2FDWBYVSFaUiRejK5xu4060%2F%2FIvs%3D&reserved=0

>

> ____________________________________________________________________

> WiX Toolset Users Mailing List provided by FireGiant

> https://urldefense.proofpoint.com/v2/url?u=https-3A__nam11.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Fwww.f&d=DwICAg&c=9mghv0deYPYDGP-W745IEdQLV1kHpn4XJRvR6xMRXtA&r=Hblpuym5RtUs_4R6qwcviv7o1-X2VNe9YBkPtiuw4mw&m=-H0iKMdVLj7F2_cUMFYVuY64UG2g_hIOVi9oRUPlb2HOHLjB-GH7-Z2MFU_pywo4&s=G1Fdp-tzkYrWerAYl8ejPZqMmCmejAIFAdPK7FPYyeI&e=

> iregiant.com%2F&data=05%7C01%7Cchuck.caldwell%40wellsky.com%7Cda87

> ff635a414cf5cb6508da3f173717%7C15d19784ad584a57a66fad1c0f826a45%7C0%7C

> 0%7C637891666194540649%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ

> QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=

> %2BglvkeLMuGfxA4sa%2FDWBYVSFaUiRejK5xu4060%2F%2FIvs%3D&reserved=0

>

____________________________________________________________________

WiX Toolset Users Mailing List provided by FireGiant https://urldefense.proofpoint.com/v2/url?u=https-3A__nam11.safelinks.protection.outlook.com_-3Furl-3Dhttp-253A-252F-252Fwww.firegiant.com-252F-26amp-3Bdata-3D05-257C01-257Cchuck.caldwell-2540wellsky.com-257Cda87ff635a414cf5cb6508da3f173717-257C15d19784ad584a57a66fad1c0f826a45-257C0-257C0-257C637891666194540649-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C3000-257C-257C-257C-26amp-3Bsdata-3D-252BglvkeLMuGfxA4sa-252FDWBYVSFaUiRejK5xu4060-252F-252FIvs-253D-26amp-3Breserved-3D0&d=DwICAg&c=9mghv0deYPYDGP-W745IEdQLV1kHpn4XJRvR6xMRXtA&r=Hblpuym5RtUs_4R6qwcviv7o1-X2VNe9YBkPtiuw4mw&m=-H0iKMdVLj7F2_cUMFYVuY64UG2g_hIOVi9oRUPlb2HOHLjB-GH7-Z2MFU_pywo4&s=zqGigtIQmkzquz648acTa0xjYiIkUCrEqipQ9YPAnMw&e=

____________________________________________________________________

WiX Toolset Users Mailing List provided by FireGiant https://urldefense.proofpoint.com/v2/url?u=http-3A__www.firegiant.com_&d=DwICAg&c=9mghv0deYPYDGP-W745IEdQLV1kHpn4XJRvR6xMRXtA&r=Hblpuym5RtUs_4R6qwcviv7o1-X2VNe9YBkPtiuw4mw&m=-H0iKMdVLj7F2_cUMFYVuY64UG2g_hIOVi9oRUPlb2HOHLjB-GH7-Z2MFU_pywo4&s=o73Itb0putBc4CAMz5srHB3RiehnuiCY471xYdsa4ng&e=

Please be advised that this email may contain confidential information. If you are not the intended recipient, please notify us by email by replying to the sender and delete this message. The sender disclaims that the content of this email constitutes an offer to enter into, or the acceptance of, any agreement; provided that the foregoing does not invalidate the binding effect of any digital or other electronic reproduction of a manual signature that is included in any attachment.