Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Npgsql v4.0.8 - unknown publisher #2538

Open
RobertZet opened this issue Jul 19, 2019 · 9 comments

Comments

@RobertZet
Copy link

commented Jul 19, 2019

Hi,
when installing Npgsql v4.0.8, Windows Defender (Win10) stops the instalation and does NOT allows to install it.
It looks like Publisher in installer is not maintained or not maintained properly.

Err.Msg:

image

Btw. i tried to install Npgsql v4.0.7 on the same PC and this was istalled succesfuly.

Thanks.
Robert

Err.Msg: Windows Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.

@roji

This comment has been minimized.

Copy link
Member

commented Jul 20, 2019

Strange, we just use the same build each time and AFAIK nothing has changed (@YohDeadfall any ideas)?

Just to be sure, you're referring to the MSI coming from here, right: https://github.com/npgsql/npgsql/releases/tag/v4.0.8?

@RobertZet

This comment has been minimized.

Copy link
Author

commented Jul 20, 2019

Yes, installed MSI is from here.
Thx.

@YohDeadfall

This comment has been minimized.

Copy link
Member

commented Jul 22, 2019

The same for 4.0.7 built using AppVeyor. Are you sure that you haven't built it locally, @roji?

@YohDeadfall YohDeadfall self-assigned this Jul 22, 2019

@roji

This comment has been minimized.

Copy link
Member

commented Jul 22, 2019

Are you sure that you haven't built it locally, @roji?

You mean 4.0.7? Yeah, pretty sure - I never build that locally. I'm also not sure why building on my machine would change anything compared to Appveyor...

Thinking about this again, it actually seems completely normal for this to happen - I'm not sure why it didn't happen in 4.0.7.

Weirdly enough, I've recently received a pretty urgent request to have the Npgsql assembly and MSI signed (not strong-named - signed), this seems to be the same thing. This can be important for people using Npgsql in PowerBI and other .NET Framework/GAC scenarios. It seems easy enough to do, except that we'd need to get a certificate from somewhere.

@austindrenski

This comment has been minimized.

Copy link
Member

commented Jul 22, 2019

except that we'd need to get a certificate from somewhere.

I think the .NET Foundation helps with that.

@roji

This comment has been minimized.

Copy link
Member

commented Jul 22, 2019

Yeah, I've already sent them an email...

@YohDeadfall

This comment has been minimized.

Copy link
Member

commented Jul 22, 2019

I'm not sure why it didn't happen in 4.0.7.

It happened, but only for the MSI from AppVeyor artifacts. The published one with hotfix 4.0.7 (available on GitHub) has no such problem.

@roji

This comment has been minimized.

Copy link
Member

commented Jul 22, 2019

The two are supposed to be identical..

@YohDeadfall YohDeadfall assigned roji and unassigned YohDeadfall Jul 23, 2019

@jongalloway

This comment has been minimized.

Copy link

commented Aug 8, 2019

Responded via e-mail. .NET Foundation is able to provide certificates to member projects. I'm happy to answer questions if there are concerns on joining.

The project application process has moved to GitHub: https://github.com/dotnet-foundation/projects/issues/new/choose

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
5 participants
You can’t perform that action at this time.