When signing an Advanced Installer MSI file with Relic, the resulting signed MSI can no longer be executed. If I use SignTool.exe with the same installer and signing certificate then the MSI is successfully signed and not corrupted. This issue seems to be specific to Advanced Installer MSI files as Relic is able to sign other MSI files, such as those generated with WiX or MSIWrapper.
Reproduction Steps
NOTE: The requisite signing certificate, relic.yml, unsigned MSI and corrupted MSI files are all attached at the end of this report.
Creating a Signing Certificate
I used the following PowerShell script to generate a signing certificate:
Issue Overview
When signing an Advanced Installer MSI file with Relic, the resulting signed MSI can no longer be executed. If I use SignTool.exe with the same installer and signing certificate then the MSI is successfully signed and not corrupted. This issue seems to be specific to Advanced Installer MSI files as Relic is able to sign other MSI files, such as those generated with WiX or MSIWrapper.
Reproduction Steps
NOTE: The requisite signing certificate, relic.yml, unsigned MSI and corrupted MSI files are all attached at the end of this report.
Creating a Signing Certificate
I used the following PowerShell script to generate a signing certificate:
Creating an Advanced Installer MSI
Signing MSI with Relic
relic.yml
Running Relic
Executing the Installer
When attempting to execute the signed MSI, the following dialog is displayed:
Additional Information
Using SignTool.exe
Test Files
RelicCorruptedMSITestFiles.zip