Digital Signing Fails all of a sudden

[Five_Bittel]

The Digital Signing just stopped working all of a sudden and I can't get a good error message as to why.
There is a certificate attached and it's still valid (although just for 3 more weeks until it has to be renewed, maybe that's the issue?)

But I can't get a good error message as to why. Is it the date? Can't he find the certificate? What is it?
How can I get a better error message or more details then this:?

Code: Select all

The digital signing of the APPDIR\Application.exe file failed. Error message: 'SignTool Error: No certificates were found that met all the given criteria.

For a possible solution please check our Digital Signature FAQ from:
https://www.advancedinstaller.com/user-guide/faq-digital-signature.html  '

Advanced Installer 21.3.1 build 69aaef70
*** Stack Trace (x86) ***

[0x76978e42]  RaiseException()
[0x71eb7e86]  CxxThrowException()
[0x015a6014]  -----
[0x015a2ec9]  -----
[0x015a2b0e]  -----
[0x01d750a7]  -----
[0x76dd9688]  free()
[0x02baa569]  -----
[0x01e4167d]  -----
[0x0159ba96]  -----
[0x0159b91e]  -----
[0x0159b92d]  -----

[MikeMcLoughlin]

I have also experienced this problem for the last couple of days. My certificate is hosted in an Azure keyvault. I think that the response format from Azure has changed recently.

[electricblue81]

We've had similar started late on Monday (22nd Jan 2024) are you storing your certificate in an Azure Key vault?

[Liviu]

Hello guys,

We cannot reproduce the behavior.

To assist us in conducting a thorough investigation of this issue, can you please send us the .AIP (project file) via email to support at advancedinstaller dot com, without the TenantID and APPID?

Best regards,
Liviu

[Liviu]

Hello guys,

My colleague Daniel has posted a workaround on the forum below:

Azure key vault signing fall in IDE

Hope this helps!

Best regards,
Liviu

[Daniel]

Hi,

Can you please download and use the following debug version of Advanced Installer 21.5? And let us know if this makes any difference?

This includes some improvements we hope will fix this issue.

All the best,
Daniel

[AlexThunder]

Hello Daniel,

is the debug installer still the best way to solve this problem? For me, signing worked after installing this version, but I'm seeing other issues with this debug version that may just be because it's a debug version.... I can't create productive installers with this version. When will there be a regular release that includes the Azure Key Vault fix?

Best,
Alex

[AlexThunder]

Looks like you released the 21.5 version now, but it is getting blocked from windows defender
Detected: Trojan:Script/Wacatac.B!ml
Status: Removed

[Catalin]

Hello Alex,

Indeed, the 21.5 version is already available.

Regarding the detection, this is quite strange. We have scanned the entire MSI using VirusTotal and got no detections.

Additionally, I downloaded the MSI today once again and manually scanned it, which resulted in 0 threads as well:

Screenshot_116.png (37.59 KiB) Viewed 24536 times

That being said, could you please try to update your Microsoft Defender Database and let me know if you are still able to reproduce this false-positive?

Best regards,
Catalin

[AlexThunder]

My defender definition is the newest one. I can reproduce the behaviour.

[Catalin]

Hello Alex,

Could you please try updating it again?

We just received news from the Microsoft team that the file was clean and they weren't able to reproduce it.

Best regards,
Catalin

[AlexThunder]

Just installed the latest version 21.5.1 and I see the same problem with the Azure Key Vault again:

Could not read server response.

Advanced Installer 21.5.1 build dda15b93
*** Stack Trace (x86) ***

[0x75f49542] RaiseException()
[0x77ba7e86] CxxThrowException()
[0x00e7f268] -----
[0x7292c4ec] HttpQueryInfoW()
[0x00800000] MODULE_BASE_ADDRESS

Unistalled the 21.5.1 and reinstalled the 21.5 and now also this version isn't working anymore:

Could not read server response.

Advanced Installer 21.5 build e6df463a
*** Stack Trace (x86) ***

[0x76c48e82] RaiseException()
[0x6e2e7e86] CxxThrowException()
[0x00eef268] -----
[0x6e897278] HttpQueryInfoW()
[0x00870000] MODULE_BASE_ADDRESS

Anyone else having that issue again? Did Microsoft change the response or am I doing something wrong? I checked the credentials and they are fine.

[Daniel]

Hi Alex,

We were able to replicate sporadically the same Key Vault signing error on our side too. Most likely the signing error is caused by the Microsoft's Azure Key Vault servers that seems to be unresponsiveness sometimes.

We worked on an improvement (we retry the Key Vault signing several times in a row) for this and it will be included in a future version of Advanced Installer. And hopefully this will avoid this issue.

When released we will update this forum thread too. Until then, please download and use the following RC version of Advanced Installer 21.6 which includes this improvement.

Let us know if this helps you.

All the best,
Daniel