Quantcast

Install certificate in users store

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Install certificate in users store

Martin Formanko
Hi,

is it possible with Wix toolset to install certificate in users store? I
need that my self-signed certificate is considered to be valid for all
browsers in operating system. I use WiX for making installation package for
my Java app. Thanks.

Martin
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Install certificate in users store

Phill Hogland
I have not used this but I recalled seeing it in the docs
http://wixtoolset.org/documentation/manual/v3/xsd/iis/certificate.html
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Install certificate in users store

Mejmoo
Yes I did found this too, but does it have something in common with IIS as
it its "IIS Extension"? Hopefully not.

On Tue, Dec 2, 2014 at 10:33 PM, Phill Hogland <[hidden email]> wrote:

> I have not used this but I recalled seeing it in the docs
> http://wixtoolset.org/documentation/manual/v3/xsd/iis/certificate.html
>
>
>
> --
> View this message in context:
> http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Install-certificate-in-users-store-tp7598330p7598335.html
> Sent from the wix-users mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
> _______________________________________________
> WiX-users mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Install certificate in users store

Keith.Douglas
You can (or at least for some things) use the IISExtension merely to install certificates - I've done that.

This was my proof of concept - it should be cleaned up:

<Wix xmlns="http://schemas.microsoft.com/wix/2006/wi"
     xmlns:iis="http://schemas.microsoft.com/wix/IIsExtension">


  <Product Id="*" Name="SigningCertsInstall" Language="1033" Version="1.0.0.0" Manufacturer="stc" UpgradeCode="2fa4ba0c-2ca2-43e2-8db0-15b64dbd4e91">
                <Package InstallerVersion="200" Compressed="yes" InstallScope="perMachine" />

                <MajorUpgrade DowngradeErrorMessage="A newer version of [ProductName] is already installed." />
                <MediaTemplate />

                <Feature Id="ProductFeature" Title="SigningCertsInstall" Level="1">
                        <ComponentRef Id="ProductComponent" />
                </Feature>
    <Binary Id="BinaryId1" SourceFile ="C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Tools\Bin\temp.cer" />
 </Product>

        <Fragment>
                <Directory Id="TARGETDIR" Name="SourceDir">
                        <Directory Id="ProgramFilesFolder">
          <Component Id="ProductComponent" Guid="{28231CA8-9C8C-4CC2-812B-32EA4B37A82F}" KeyPath="yes">
            <iis:Certificate Id="CertId1" BinaryKey="BinaryId1"
                             Name="dougkei" StoreLocation="localMachine" StoreName="otherPeople" Request="no"/>

          </Component>
                        </Directory>
                </Directory>
        </Fragment>

</Wix>

In our case we want to allow several users on a machine to access it through an application, so it goes it a common location.



Keith Douglas
Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6
Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6
[hidden email]
Telephone | Téléphone 613-854-5589
Facsimile | Télécopieur 613-951-4674
Government of Canada | Gouvernement du Canada

-----Original Message-----
From: Mejmoo [mailto:[hidden email]]
Sent: December-02-14 4:47 PM
To: General discussion about the WiX toolset.
Subject: Re: [WiX-users] Install certificate in users store

Yes I did found this too, but does it have something in common with IIS as it its "IIS Extension"? Hopefully not.

On Tue, Dec 2, 2014 at 10:33 PM, Phill Hogland <[hidden email]> wrote:

> I have not used this but I recalled seeing it in the docs
> http://wixtoolset.org/documentation/manual/v3/xsd/iis/certificate.html
>
>
>
> --
> View this message in context:
> http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Install-
> certificate-in-users-store-tp7598330p7598335.html
> Sent from the wix-users mailing list archive at Nabble.com.
>
>
> ----------------------------------------------------------------------
> -------- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT
> Server from Actuate! Instantly Supercharge Your Business Reports and
> Dashboards with Interactivity, Sharing, Native Excel Exports, App
> Integration & more Get technology previously reserved for
> billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.
> clktrk _______________________________________________
> WiX-users mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Install certificate in users store

Tom Brezinski
Another options is invoking certutil.exe (on Vista and newer versions of windows) with a CAQuietExec.  Here's an example that installs to the system store, just tweak the certutil.exe command to go to the user store if that is where you want it.

        <CustomAction Id="CreateCertCommand"
                      Property="RegisterCert"
                      Value="&quot;certutil.exe&quot; -addstore &quot;Root&quot; &quot;[PATH_TO_CERT]\certificate.crt&quot;" />

        <CustomAction Id="RegisterCert"
                      BinaryKey="WixCA"
                      DllEntry="CAQuietExec"
                      Execute="deferred"
                      Return="check"
                      Impersonate="no" />

The one downside to this is it won't work for all browsers on the operating system as you requested.  Firefox for example does not use the Windows certificate store.  Chrome and IE do, not sure about some of the other browsers out there.

-Tom

-----Original Message-----
From: [hidden email] [mailto:[hidden email]]
Sent: Tuesday, December 02, 2014 3:53 PM
To: [hidden email]
Subject: Re: [WiX-users] Install certificate in users store

You can (or at least for some things) use the IISExtension merely to install certificates - I've done that.

This was my proof of concept - it should be cleaned up:

<Wix xmlns="http://schemas.microsoft.com/wix/2006/wi"
     xmlns:iis="http://schemas.microsoft.com/wix/IIsExtension">


  <Product Id="*" Name="SigningCertsInstall" Language="1033" Version="1.0.0.0" Manufacturer="stc" UpgradeCode="2fa4ba0c-2ca2-43e2-8db0-15b64dbd4e91">
                <Package InstallerVersion="200" Compressed="yes" InstallScope="perMachine" />

                <MajorUpgrade DowngradeErrorMessage="A newer version of [ProductName] is already installed." />
                <MediaTemplate />

                <Feature Id="ProductFeature" Title="SigningCertsInstall" Level="1">
                        <ComponentRef Id="ProductComponent" />
                </Feature>
    <Binary Id="BinaryId1" SourceFile ="C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\Tools\Bin\temp.cer" />  </Product>

        <Fragment>
                <Directory Id="TARGETDIR" Name="SourceDir">
                        <Directory Id="ProgramFilesFolder">
          <Component Id="ProductComponent" Guid="{28231CA8-9C8C-4CC2-812B-32EA4B37A82F}" KeyPath="yes">
            <iis:Certificate Id="CertId1" BinaryKey="BinaryId1"
                             Name="dougkei" StoreLocation="localMachine" StoreName="otherPeople" Request="no"/>

          </Component>
                        </Directory>
                </Directory>
        </Fragment>

</Wix>

In our case we want to allow several users on a machine to access it through an application, so it goes it a common location.



Keith Douglas
Statistics Canada | 170 Tunney's Pasture Driveway, Ottawa ON K1A 0T6 Statistique Canada | 170, promenade Tunney's Pasture, Ottawa ON K1A 0T6 [hidden email] Telephone | Téléphone 613-854-5589 Facsimile | Télécopieur 613-951-4674 Government of Canada | Gouvernement du Canada

-----Original Message-----
From: Mejmoo [mailto:[hidden email]]
Sent: December-02-14 4:47 PM
To: General discussion about the WiX toolset.
Subject: Re: [WiX-users] Install certificate in users store

Yes I did found this too, but does it have something in common with IIS as it its "IIS Extension"? Hopefully not.

On Tue, Dec 2, 2014 at 10:33 PM, Phill Hogland <[hidden email]> wrote:

> I have not used this but I recalled seeing it in the docs
> http://wixtoolset.org/documentation/manual/v3/xsd/iis/certificate.html
>
>
>
> --
> View this message in context:
> http://windows-installer-xml-wix-toolset.687559.n2.nabble.com/Install-
> certificate-in-users-store-tp7598330p7598335.html
> Sent from the wix-users mailing list archive at Nabble.com.
>
>
> ----------------------------------------------------------------------
> -------- Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT
> Server from Actuate! Instantly Supercharge Your Business Reports and
> Dashboards with Interactivity, Sharing, Native Excel Exports, App
> Integration & more Get technology previously reserved for
> billion-dollar corporations, FREE
>
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.
> clktrk _______________________________________________
> WiX-users mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Install certificate in users store

Rob Mensching-7
There are way more downsides, for example rollback support is way more complex.  Shelling to an executable is never* the right thing to do.


* for very large sets of "never"
_____________________________________________________________
 Short replies here. Complete answers over there: http://www.firegiant.com/


-----Original Message-----
From: Tom Brezinski [mailto:[hidden email]]
Sent: Wednesday, December 3, 2014 6:29 AM
To: General discussion about the WiX toolset.
Subject: Re: [WiX-users] Install certificate in users store

Another options is invoking certutil.exe (on Vista and newer versions of windows) with a CAQuietExec.  Here's an example that installs to the system store, just tweak the certutil.exe command to go to the user store if that is where you want it.

        <CustomAction Id="CreateCertCommand"
                      Property="RegisterCert"
                      Value="&quot;certutil.exe&quot; -addstore &quot;Root&quot; &quot;[PATH_TO_CERT]\certificate.crt&quot;" />

        <CustomAction Id="RegisterCert"
                      BinaryKey="WixCA"
                      DllEntry="CAQuietExec"
                      Execute="deferred"
                      Return="check"
                      Impersonate="no" />

The one downside to this is it won't work for all browsers on the operating system as you requested.  Firefox for example does not use the Windows certificate store.  Chrome and IE do, not sure about some of the other browsers out there.

-Tom

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Install certificate in users store

Raghu12
This post has NOT been accepted by the mailing list yet.
Working POC :)

Installing and uninstalling working.

<?xml version="1.0" encoding="UTF-8"?>
<Wix xmlns="http://schemas.microsoft.com/wix/2006/wi"
     xmlns:iis="http://schemas.microsoft.com/wix/IIsExtension" >
        <Product Id="*" Name="ProjectOne" Language="1033" Version="1.0.0.0" Manufacturer="OCA" UpgradeCode="bbf42aa4-a6a1-4f9b-9df7-bc4793c37ff8">
                <Package InstallerVersion="200" Compressed="yes" InstallScope="perMachine" />
    <Media Id="1" />
                <Feature Id="ProductFeature" Title="ProjectOne" Level="1">
                        <ComponentRef Id="CoreComp" />
                </Feature>

    <Directory Id="TARGETDIR" Name="SourceDir">
      <Directory Id="INETPUB" Name="inetpub">
        <Directory Id="CERTIFICATE" Name="Certificate">
          <Component Id="CoreComp" Guid="116ECFB5-1C56-4D70-96D1-AE4496CB7FB1">
            <CreateFolder/>
            <iis:Certificate Id="OCA.cer" Name="OCA.cer" Request="no" StoreLocation="localMachine"
                             StoreName="root" Overwrite="no" CertificatePath="c:\inetpub\Certificate\OCA.cer"/>
          </Component>
        </Directory>
      </Directory>
    </Directory>
  </Product>
</Wix>
Loading...