bill.me
Posts: 8
Joined: Thu Apr 13, 2023 7:02 pm

Azure key vault signing fall in IDE

Wed Jan 24, 2024 10:18 pm

Here is the log:

[ Development ]
Building package:
C:\_Published\Manager\ManagerInstall.exe
Prepare build
Detecting MSI incompatible resources
Preparing files
Creating CAB file(s)
Signing CAB file(s)
Preparing binaries
Creating MSI database
Writing Summary Information
Signing MSI
Could not read server response.
Error details


And error details:

Could not read server response.

Advanced Installer 21.3.1 build 69aaef70
*** Stack Trace (x86) ***

[0x757d9392] RaiseException()
[0x509a7e86] CxxThrowException()
[0x007cae48] -----
[0x73d9c4ec] HttpQueryInfoW()
[0x00150000] MODULE_BASE_ADDRESS

Liviu
Posts: 1026
Joined: Tue Jul 13, 2021 11:29 am
Contact:  Website

Re: Azure key vault signing fall in IDE

Thu Jan 25, 2024 9:33 am

Hello,

I replied on the other thread debating this issue.

You can check my reply here.
To assist us in conducting a thorough investigation of this issue, can you please send us the .AIP (project file) via email to support at advancedinstaller dot com, without the TenantID and APPID?

Best regards,
Liviu
________________________________________
Liviu Sandu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

maxschaf
Posts: 9
Joined: Thu Aug 05, 2021 8:46 am

Re: Azure key vault signing fall in IDE

Thu Jan 25, 2024 4:54 pm

We have something similar; our builds suddenly fail since yesterday, we are not aware of any change made.

Exit code of C:\Program Files (x86)\Caphyon\Advanced Installer 20.2.1\bin\x86\AdvancedInstaller.com was -536805276

any idea what this means? signing issue, key vault shows authentication errors... but the secret etc. are fine, they work with AzureSignTool, etc.

maxschaf
Posts: 9
Joined: Thu Aug 05, 2021 8:46 am

Re: Azure key vault signing fall in IDE

Thu Jan 25, 2024 4:56 pm

Could not read server response.

Build finished because an error was encountered.


I think they turn off old tls versions...

maxschaf
Posts: 9
Joined: Thu Aug 05, 2021 8:46 am

Re: Azure key vault signing fall in IDE

Fri Jan 26, 2024 11:52 am

The network requests within AI to key vault fail most (!) of the time, AI is not resilient to network error. So we retry building AI project now for up to 15 times and this helps as a workaround.
AzureSignTool is more resilient and works. Please improve AI!

Daniel
Posts: 8237
Joined: Mon Apr 02, 2012 1:11 pm
Contact:  Website

Re: Azure key vault signing fall in IDE

Fri Jan 26, 2024 1:07 pm

Hi,

Thank you for your feedback on this! We are currently working as we speak to some improvement that we hope will avoid such issues.

In the meantime, as a workaround solution you can try indeed to use the "azuresigntool.exe" tool to sign your setup project. This tool can be install using the following dotnet command:

Code: Select all

dotnet tool install --global AzureSignTool --version 4.0.1
Then, all you need to configure in "Digital Signatures" page of your setup project is a custom command line like this:

Code: Select all

sign -du "https:\\<YourDescriptionURL>" -fd sha256 -kvi "<AppID>" -kvt "<TenantID>" -kvu "https://<VaultName>.vault.azure.net" -kvs "<AppSecret>" -kvc "<certificateName>" -tr "http://timestamp.digicert.com" -td sha256 -v
screenshot.jpg
screenshot.jpg (75KiB)Viewed 9804 times

Hope this helps.

As soon as we have a version of Advanced Installer with improvements in this regard we will update this forum thread too.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

maxschaf
Posts: 9
Joined: Thu Aug 05, 2021 8:46 am

Re: Azure key vault signing fall in IDE

Fri Jan 26, 2024 1:56 pm

Hi,

thanks for your answer. we tried AzureSignTool v3 in AI this morning and we had the same issue some times; we decided to just restart the AI up to 15 times in our pipelines and this works as a workaround for us.

We are looking forward to your AI improvement and we will upgrade AI then. It looks like we are good with our retries in the mean time.

Best.

Daniel
Posts: 8237
Joined: Mon Apr 02, 2012 1:11 pm
Contact:  Website

Re: Azure key vault signing fall in IDE

Sun Jan 28, 2024 8:32 am

Hi,

Can you please download and use the following debug version of Advanced Installer 21.5? And let us know if this makes any difference?

This includes some improvements we hope will fix this issue.

All the best,
Daniel
Daniel Radu - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Common Problems”