To answer my own question, don't use an outdated MSI with a newer CAB file (though I am still not certain why it caused the issue). I was under the impression that if the CAB was signed there was no additional verification done on the CAB. If in fact it was using two different certificates then windows installer could at least have been nice enough to point out the different thumb prints.
-----Original Message----- From: Hoover, Jacob [mailto:jacob.hoo...@greenheck.com] Sent: Tuesday, February 11, 2014 9:27 AM To: General discussion about the WiX toolset. Subject: Re: [WiX-users] Digitally signed MSI with signed external CAB's Win 7 x64, CAB is 50 MB. -----Original Message----- From: Bob Arnson [mailto:b...@joyofsetup.com] Sent: Tuesday, February 11, 2014 9:21 AM To: wix-users@lists.sourceforge.net Subject: Re: [WiX-users] Digitally signed MSI with signed external CAB's On 11-Feb-14 10:11, Hoover, Jacob wrote: > I've been signing and deploying for several years now, but with the latest > release I've ran into a strange problem. The first error complains about a > difference in size between the certificate in the CAB verses what's in the > package. The second error is a bit comical complaining that the digital > signature is invalid, but WinVerifyTrust returned 0. If I peek into the > Package Cache, looking at the CAB and the MSI, both show as having a valid > digital signature. Using Orca and extracting the certificate embedded in the > MSI shows the same certificate which is valid. Which runtime OS? How big a cab? Older versions of Windows got increasingly unreliable the bigger the signed file got. -- sig://boB http://joyofsetup.com/ ------------------------------------------------------------------------------ Android apps run on BlackBerry 10 Introducing the new BlackBerry 10.2.1 Runtime for Android apps. Now with support for Jelly Bean, Bluetooth, Mapview and more. Get your Android app in front of a whole new audience. Start now. http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Android apps run on BlackBerry 10 Introducing the new BlackBerry 10.2.1 Runtime for Android apps. Now with support for Jelly Bean, Bluetooth, Mapview and more. Get your Android app in front of a whole new audience. Start now. http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Android apps run on BlackBerry 10 Introducing the new BlackBerry 10.2.1 Runtime for Android apps. Now with support for Jelly Bean, Bluetooth, Mapview and more. Get your Android app in front of a whole new audience. Start now. http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users