Skip to content

Append _wixcert_ to CA test for rollback check #606

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

bevanweiss
Copy link
Contributor

Taken from wixtoolset/wix3/pull/546, but have left out the explicit length calculation from the pwzUniquePrefix string, and using this in the compare.

Fixes wixtoolset/issues#3976

@bevanweiss bevanweiss marked this pull request as draft February 22, 2025 13:04
@bevanweiss
Copy link
Contributor Author

I think maybe the whole _wixcert_x portion should disappear (and so this PR isn't so valid).
I believe the thumbprint of the certificate should be sufficient.
Any objections to changing to Thumbprints to know what activities we should / have already done (for the install / rollback)?

@robmen
Copy link
Member

robmen commented Mar 4, 2025

It's been a long time since I looked at the cert custom actions, but IIRC the thumbprint could be provided as a property so it wasn't necessarily a stable identifier that could be used to uninstall the certificate later. This is fuzzy, but it may be that the cert install behavior needs more of a re-design to address the suffix... which is why that issue was just hanging out unfixed.

…ength

calculation from the pwzUniquePrefix string, and using this in the compare.

Fixes #3976


Signed-off-by: Bevan Weiss <bevan.weiss@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Certificate uninstall rollback does not rollback the deletion of the certifcate
2 participants