Forum Discussion
Solved
Code signing works on exe but doesn't on msix
Hi there, I'm used to code sign our exe (built with Visual Studio and packed with Innosetup) without problem: signtool.exe sign /n "oursoft" .\oursoft.exe Done Adding Additional Store Successfull...
- I finally fixed the problem: it was the publisher name that was incomplete:
When signing our Innosetup install, "CN=Ourcompany" was sufficient for the signing procedure to be successful.
While when signing the MSIX intall, it was not. It should have been " CN=Ourcompany, O=Ourcompany, S=Auvergne-Rhône-Alpes, C=FR, OID......."
I found the right publisher name value thanks to the Windows event viewer application that reported the details of the error.
The section to check was: Microsoft-Windows-AppxPackagingOM
I hope this will save time to somebody.
Pascal
I finally fixed the problem: it was the publisher name that was incomplete:
When signing our Innosetup install, "CN=Ourcompany" was sufficient for the signing procedure to be successful.
While when signing the MSIX intall, it was not. It should have been " CN=Ourcompany, O=Ourcompany, S=Auvergne-Rhône-Alpes, C=FR, OID......."
I found the right publisher name value thanks to the Windows event viewer application that reported the details of the error.
The section to check was: Microsoft-Windows-AppxPackagingOM
I hope this will save time to somebody.
Pascal
When signing our Innosetup install, "CN=Ourcompany" was sufficient for the signing procedure to be successful.
While when signing the MSIX intall, it was not. It should have been " CN=Ourcompany, O=Ourcompany, S=Auvergne-Rhône-Alpes, C=FR, OID......."
I found the right publisher name value thanks to the Windows event viewer application that reported the details of the error.
The section to check was: Microsoft-Windows-AppxPackagingOM
I hope this will save time to somebody.
Pascal
Does the publisher on certificate need to match the publisher defined in MSIX package? Or can I sign any MSIX file?
- Yes, they have to be a match otherwise you can't sign the MSIX package.
Technically, you can sign any MSIX package, if you change the publisher in the package to match the one from the certificate.
