Signing software fails when building via jenkins a visual studio sln

104 views

Skip to first unread message

elmer fuller

unread,

Jun 6, 2019, 6:04:50 PM6/6/19

to Jenkins Users

I have a visual studio sln that collates code built by other visual studio projects. As part of this sln the wix tool set is used

to sign the code. When I run the sln in visual studio everything works fine. When I build the sln via jenkins everything

works except the signing. I get the following error:

2:2>Project "C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\SMCBootstrapper\SMCBootstrapper.wixproj.metaproj" (2:2) is building "C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\SMCCallHome\SmcCallHome.wixproj" (3:3) on node 1 (Rebuild target(s)).

Signing Modules...

3>EXEC : SignTool error : No certificates were found that met all the given criteria.

3>C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\SMCCallHome\SmcCallHome.wixproj(58,5): error MSB3073: The command ""C:\Program Files (x86)\Windows Kits\10\bin\10.0.17763.0\x64\signtool.exe" sign /a /fd SHA256 /n "Unisys Corporation" /t "http://timestamp.verisign.com/scripts/timstamp.dll" "C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\..\..\CallHome\CreateCallHomeDialUp\bin\Release\CreateCallHomeDialUp.exe"" exited with code 1.

3>Done Building Project "C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\SMCCallHome\SmcCallHome.wixproj" (Rebuild target(s)) -- FAILED.

2>Done Building Project "C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\SMCBootstrapper\SMCBootstrapper.wixproj.metaproj" (Rebuild target(s)) -- FAILED.

1>Done Building Project "C:\Program Files (x86)\Jenkins\workspace\Build_Trunk\Media\Build\ServerManagementControl.sln" (Clean;Rebuild target(s)) -- FAILED.

Build FAILED.

If I take the command that fails and run it in a cmd window the command works just fine. How/what needs to be done to get Jenkins to use the installed certificate on the system to sign

the software?

Thanks for any help.

Slide

unread,

Jun 6, 2019, 6:45:29 PM6/6/19

to Jenkins User Mailing List

You Jenkins is probably running under a different user account than the account you used on the command line. You can create an agent that runs on the same machine that runs are the user that has access to the certificate for signing.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/27942f5e-4fd7-4349-9a52-5fd021ca1d60%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.