Wow, no faith from the peanut gallery.

If the file is signed (something else we calculate during build when
referencing the file) we will use the signature of the file not the hash. If
the signature on the file changed in between the point that you built and
the user downloaded the actual file, chances are the user has a file you
don't want them installing. <smile/>


On Wed, Jul 6, 2011 at 10:23 AM, Roy Chastain <[email protected]> wrote:

> > Light uses the source file to get information about the file to put
> into
> > the manifest (e.g., file size, hash); if specified, it also uses it to
>
> > embed, but that's optional.
>
> So you are telling me that I must have a local copy of any of the
> Microsoft install packages that I wish to have downloaded at install
> time.  The implication is that should MS change the package between when
> I build the bootstrapper and when the customer runs it, the process will
> fail because the HASH code etc will be different.
>
> If the above is correct, are we sure this is the right path?  I cannot
> say for sure, but I would not expect that behavior from the MS supplied
> SETUP.exe bootstrapper.
>
> ----------------------------------------------------------------------
> Roy Chastain
>
>
>
>
> ------------------------------------------------------------------------------
> All of the data generated in your IT infrastructure is seriously valuable.
> Why? It contains a definitive record of application performance, security
> threats, fraudulent activity, and more. Splunk takes this data and makes
> sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-d2d-c2
> _______________________________________________
> WiX-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
>


-- 
virtually, Rob Mensching - http://RobMensching.com LLC
------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
WiX-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to