Very True.  I was thinking that there would not be a security issue if you 
check the UpgradeCode on the downloaded bundle before installing but anybody 
could make a bundle with my upgrade code.  :)  Maybe you could support it only 
in cases were the bundle is signed?  You could check that the signature from 
both bundles come from the same company once downloaded.  Is this reasonable?  
And/or add a URL attribute for wixstba in the wix project that gets compiled 
and that only allow checks for updates from this URL or based off this URL??? 

Anyways I was trying to take the easy route but looks like going to have to 
implement my own BA.   :)   

Thanks.

Wes

-----Original Message-----
From: Rob Mensching [mailto:r...@robmensching.com] 
Sent: October-15-12 2:17 PM
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] Some in burn wixstba similar to msiexec /x ProductCode

Having the update URL come from outside the Bundle would be a very large 
security gap. Essentially, any Bundle could be used to launch any other random 
Bundle. That's not right.  There is certainly work that could be done in the 
wixstdba to support "bundle self-update" but I don't think passing the update 
URL via the command-line is the right way to do that.
<smile/>

On Sun, Oct 14, 2012 at 5:56 PM, Wesley Manning <wmann...@dynagen.ca> wrote:

> Sorry, for (1) I meant I don't want to do it from a custom BA. I want 
> to do it by calling the bundle from the application software that my 
> bundle installs.  I know for wixstba you provide /uninstall and /repair 
> commands.
>  I use wixstba for my bundle so it would be nice if there was an "/upgrade"
> command line option in wixstba where I pass the URL of the update and 
> the bundle downloads and installs it.  Is this something that you guys 
> can do for version 3.7?
>
> Thanks for the info on UninstallKey in the registry.  I actually 
> forgot about that.  I see it has a  BundleCachePath value so I can use 
> that to call  my bundle.  All I need is for the wixstba to have a 
> command line argument to do an upgrade.  Questions 2 and 3 are moot now.
>
> Wes
>
> -----Original Message-----
> From: Rob Mensching [mailto:r...@robmensching.com]
> Sent: October 14, 2012 12:37 AM
> To: General discussion for Windows Installer XML toolset.
> Subject: Re: [WiX-users] Some in burn wixstba similar to msiexec /x 
> ProductCode
>
> 1. I don't quite understand the question. The bundle self-update 
> feature allows a BA to check the internet and tell the engine that 
> there is a newer version of itself and to download then launch that 
> instead. It is not clear to me what the command-line has to do with it.
>
> 2. Bundles are registered in ARP (aka: Program and Features, aka: the 
> UninstallKey). That's how you can click on the "Uninstall" button in 
> ARP and Burn launches to remove the bundle. You can search for it that 
> way if you want.
>
> 3. Again, the self-update happens inside a Burn bundle. It isn't 
> driven from a command-line argument. I may just be confused by not 
> understanding your first question.
>
> You always have the Bundle. It's cached. That's how ARP works.
>
> On Fri, Oct 12, 2012 at 10:44 AM, Wesley Manning <wmann...@dynagen.ca
> >wrote:
>
> > Hi, have some questions about wixstba:
> >
> > (1) Wix 3.7 bundle self update feature:  Is it possible (or any 
> > plans to make it possible) to run from the command line?  You would 
> > need to run the bundle exe (thus have to know where its located).  
> > There is already -uninstall, -repair, etc.
> > (2) Since Windows installer is part of the operating system it is 
> > possible to install/uninstall/repair by running msiexec /x 
> > ProductCode.  You don't need to have the MSi file or know where it 
> > is on the computer.  Is there something similar for bundles?  This 
> > question is really about burn in general.
> > (3) Similar to (2) above but for the wix 3.7 self update feature: 
> > give an upgrade code and URL and have it download and upgrade the bundle.
> > Is this possible?
> >
> > I was hoping to have our software update itself / show its own 
> > install progress UI so the user doesn't have to use the bundle for 
> > that (they may not have the bundle anymore).  The bundle would only 
> > be used to install our software on a clean computer or if user goes 
> > to ARP they can interact with the bundle.  I see in 
> > Wix37\src\burn\Samples there is an example on how to get progress from burn.
> >
> > I could write code to download the burn exe myself but burn can 
> > already download updates so...
> >
> > Wes
> >
> > -----Original Message-----
> > From: James Johnston [mailto:johnst...@inn-soft.com]
> > Sent: October-12-12 1:15 PM
> > To: wix-users@lists.sourceforge.net
> > Subject: [WiX-users] Broken links on WiX web site
> >
> > Hi,
> >
> > The page at:
> > http://wix.sourceforge.net/manual-wix3/WixUI_dialog_library.htm
> > contains some broken links.  Specifically, WixUI_Mondo and 
> > WixUI_Minimal are broken (404 Not Found).
> >
> > Not sure who maintains the web site so I'm writing to this list...
> >
> > Best regards,
> >
> > James Johnston
> >
> >
> >
> > --------------------------------------------------------------------
> > --
> > -------- Don't let slow site performance ruin your business. Deploy 
> > New Relic APM Deploy New Relic app performance management and know 
> > exactly what is happening inside your Ruby, Python, PHP, Java, and 
> > .NET app Try New Relic at no cost today and get our sweet Data Nerd 
> > shirt too!
> > http://p.sf.net/sfu/newrelic-dev2dev
> > _______________________________________________
> > WiX-users mailing list
> > WiX-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/wix-users
> >
> >
> >
> >
> > --------------------------------------------------------------------
> > --
> > -------- Don't let slow site performance ruin your business. Deploy 
> > New Relic APM Deploy New Relic app performance management and know 
> > exactly what is happening inside your Ruby, Python, PHP, Java, and 
> > .NET app Try New Relic at no cost today and get our sweet Data Nerd 
> > shirt too!
> > http://p.sf.net/sfu/newrelic-dev2dev
> > _______________________________________________
> > WiX-users mailing list
> > WiX-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/wix-users
> >
>
>
>
> --
> virtually,
>
>    Rob Mensching
>    http://RobMensching.com LLC
>
> ----------------------------------------------------------------------
> -------- Don't let slow site performance ruin your business. Deploy 
> New Relic APM Deploy New Relic app performance management and know 
> exactly what is happening inside your Ruby, Python, PHP, Java, and 
> .NET app Try New Relic at no cost today and get our sweet Data Nerd 
> shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> WiX-users mailing list
> WiX-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
>
>
>
> ----------------------------------------------------------------------
> -------- Don't let slow site performance ruin your business. Deploy 
> New Relic APM Deploy New Relic app performance management and know 
> exactly what is happening inside your Ruby, Python, PHP, Java, and 
> .NET app Try New Relic at no cost today and get our sweet Data Nerd 
> shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> WiX-users mailing list
> WiX-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/wix-users
>



--
virtually,

   Rob Mensching
   http://RobMensching.com LLC
------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM Deploy 
New Relic app performance management and know exactly what is happening inside 
your Ruby, Python, PHP, Java, and .NET app Try New Relic at no cost today and 
get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users



------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to