How do I find out install4j's default for the countersigning URL? - install4j

Using org.sonatype.install4j:install4j-maven-plugin:1.1.1:compile with install4j7.
It is failing with install4j: compilation failed. Reason: error during counter signing: java.io.IOException: connect timed out.
This is most likely firewalls blocking the build server from reaching the counter signing server, but how do I make install4j log the URL is was trying to use? (Maven's debug logging didn't help.)

Found the answer in https://www.ej-technologies.com/resources/install4j/help/doc/install4j.pdf:
install4j uses the DigiCert time stamp signing service at
http://timestamp.digicert.com
and falls back to the GlobalSign time stamp signing service at
http://timestamp.globalsign.com
if there is a failure.

Related

AWS AmazonS3Client request returns error "The remote certificate is invalid according to the validation procedure"

We have an application using AWS SDK AmazonS3Client to communicate with the S3 service to get files downloaded. With thousands of instances running fine, however, we got a few sites getting the following exception error message:
The remote certificate is invalid according to the validation procedure.
The versions of the AmazonSDK.S3.dll and AmazonS3.Core.dll we're using are 3.3.102.18 and 3.3.103.1 respectively. These had been running for over a year without problems until recently.
Has anyone else experienced the similar issue? What could be the root cause of the problem? How do we resolve it?
Thanks!
This has been determined as an issue with proxy server loaded with incorrect certificate from the service provider. So, not really the application issue.

Web Deploy not working. Timeout on client. Schannel 1203 on server

I'm trying to deploy an application via web deploy to a windows 2012 r2 server.
First tried installing iis, web deploy using the msi. After getting an unreachable error I saw somewhere that I needed wmsvc to be installed and installed it via powershell command Install-WindowsFeature Web-Mgmt-Service.
I stopped getting the unreachable error and started getting this error ->
Error: Could not complete the request to remote agent URL 'http://xx.x.xx.xx:8172/MSDEPLOYAGENTSERVICE'.
Error: The operation has timed out
On the server's event viewer under system I get the following error ->
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.
Any idea of what could be going on? Did I miss something on the installation?
After this I also tried installing everything but without iis and I get the same error.
So, this is really not a PoSH issue.
Maybe you should consider movin gthis question to another forum.
Anyway, you have either real server config issues (this can sometimes mean wipe and rebuild - very ugly option - but if it's a virtual machine and you have a snapshot, just roll back), or an app causing this.
Typically for Schannel type of error, it has to do with application or service in machine not able to complete any SSL connection sort of connection.
The error state parameter of 1203 means client error connecting to server, ie invalid ClientHello from the client
See if you can collect more data by...
https://support.microsoft.com/en-us/help/260729/how-to-enable-schannel-event-logging-in-iis
I realized this is an old question, but in case somebody ran into the same issue, here are my solution.
I had to follow this guidelines : https://learn.microsoft.com/en-us/aspnet/web-forms/overview/deployment/configuring-server-environments-for-web-deployment/configuring-a-web-server-for-web-deploy-publishing-web-deploy-handler
Copy the resulting publishsetting file. In the Publish/Profile page import it.
In the Publish/Connection page, change the server to the server address with the 8172 port. Add the password. Change the Destination URL to the site to go to after the publish is completed.
Then after Validate connection was completed, go ahead and publish it!

Visual studio release management - deploy with ps/dsc encountered error with server certificate

I'm trying to run a simple ps script on a target computer (my local machine) from our RM server through the RM client. However the release falls over when it reaches deploy using ps/dsc. The error message reads:
Connecting to remote server ### failed with the following error message : The server certificate on the destination computer (###:5985) has the following errors:
Encountered an internal error in the SSL library.
However as you can see by the winrm port number, I'm using HTTP not HTTPS to communicate with my machine, so surely SSL should not come into it. So has anyone else come across this or have any idea what I could be doing wrong?
UPDATE: the machines are part of the same domain.
In the deploy using DSC action keep UseHTTPS variable to false and skipCACheck to true, just in case.
BTW, how long does it take for the action to show this error message in the logs? Also, as someone mentioned in the comments, are you able to manually run the script using PS remoting?
If none of the above helps, we would need more details. Try looking into the event logs for the target machine right after your deployment failed and check for any errors.
I came across same issue ,On installing Azure service certification VM tailed,Resolved issue.

What's the url for signing process?

From time to time we have problems with the signing process of install4j and it seems to be a problem with the connection to the signing service. Related tpo the thread SocketTimeoutException during signing process we increased the timeout to 60 seconds. However we got still the problem with the connection and now we will check the infrastructer of our build environment. Furthermore we want to install a connection check for the signing url. Therefore we need the url that is used to sign up the executables. Is the following one the right one: http://timestamp.verisign.com/scripts/timstamp.dll? It was logged by install4j during an error build run.
Yes, http://timestamp.verisign.com/scripts/timstamp.dll is the URL that is used to generate the timestamp signature.
You can change that URL by setting the VM parameter -Dinstall4j.timestampUrl=[url]. See Alternative timestamping services for Authenticode for alternative URLs.

CRM Plugin Registration Tool Error - An unsecured or incorrectly secured fault

I'm trying to run the CRM Plugin Registration Tool for the first time and I'm getting the following error: An unsecured or incorrectly secured fault was received from the other party. See the inner FaultException for the fault code and detail.
I'm using the following for the Discovery URL as it's web based CRM: https://dev.crm.dynamics.com.
User name and label are correct.
Thanks in advance.
I had same issue in registering new assembly.
My problem solved in this way:
1- Close current connection in Plugin Registration Tool.
2- Create new connection to server (login again). If you couldn't login, you should reset IIS or Recycle Application Pool or (at least) Restart Server.
Best Regards.