EXE and MSI file signature mismatch

Having trouble running Advanced Installer? Got a bug to report? Post it all here.
Jimmy_Cnir
Posts: 6
Joined: Wed Sep 27, 2017 8:10 am

EXE and MSI file signature mismatch

Postby Jimmy_Cnir » Mon Nov 06, 2017 1:12 pm

Hi Sir.

We used advanced installer version 14.4 to build package,
and installed package on others PC/NB, appear "exe and msi file signature mismatch".
step 1: add file into "post-install".
step 2: enable Digital Signature page "Enable signing"
step 3: used SignTool.exe signed with SHA1 or SHA256

Daniel
Posts: 6535
Joined: Mon Apr 02, 2012 1:11 pm
Contact:

Re: EXE and MSI file signature mismatch

Postby Daniel » Fri Nov 10, 2017 10:30 am

Hello,

I've tested the scenario but cannot replicate the issue. Can you please send us to support at advancedinstaller dot com the AIP (project file) and a verbose log of such an installation so we can further test and investigate this?

Also, can you let us know if you sign the EXE setup package outside of Advanced Installer. This error may appear if you do sign the EXE setup package outside of the Advanced Installer. In this case the EXE will detect that the MSI embedded inside it doesn't have a signature, thus there will be a signature mismatch between EXE bootstrapper and its embedded MSI. In this case the installation will be aborted. If you want to digitally sign your setup package you should use only our "Digital Signature" page.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

sfaust
Posts: 25
Joined: Tue Oct 13, 2015 11:57 pm

Re: EXE and MSI file signature mismatch

Postby sfaust » Mon Nov 27, 2017 9:58 pm

I have a similar issue to this, however I think I understand where it's coming from but I don't know what can be done about it...

I am developing a program for another company through a consulting agreement. They have their own certificate that they would like to use to sign, however they (understandably) don't want to give me all the credentials for their cert in order to automatically sign through the AI interface. For program code (exe's and dll's) as well as msi installs I have been able to just build it and then hand it off to them to sign. However, they would like to use the advanced UI which requires exe build. When I do this there is only an exe, not a separate msi for them to sign. When they sign the exe it ends up with this mismatch since the embedded msi isn't signed...

Is there a way for them to sign both the exe and msi without having AI? What are the options for dealing with this situation?

Daniel
Posts: 6535
Joined: Mon Apr 02, 2012 1:11 pm
Contact:

Re: EXE and MSI file signature mismatch

Postby Daniel » Tue Nov 28, 2017 10:22 am

Hello,

As a workaround you could use your own certificate (even a test one) to sign the setup package from Advanced Installer. Then you can forward the EXE setup to the customer and they can further on sign the setup with their own certificate. This way the EXE and MSI signature mismatch behavior will be avoided.

As another option you could choose to build the setup as an EXE with resources outside (check this option under "Build" page into your setup project)) and forward all the built setup resources to the customer to be signed on their side.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

sfaust
Posts: 25
Joined: Tue Oct 13, 2015 11:57 pm

Re: EXE and MSI file signature mismatch

Postby sfaust » Tue Nov 28, 2017 6:49 pm

Wouldn't that create the same issue since the msi would be signed by my certificate and the exe would be theirs? or is it just that it has to be signed by SOMETHING in both or neither? Running some tests on that now...

Daniel
Posts: 6535
Joined: Mon Apr 02, 2012 1:11 pm
Contact:

Re: EXE and MSI file signature mismatch

Postby Daniel » Wed Nov 29, 2017 11:45 am

or is it just that it has to be signed by SOMETHING in both or neither?

That's right.

Just let us know if there is anything else we can help you with.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube


Return to “Common Problems”

Who is online

Users browsing this forum: No registered users and 2 guests