Changeset 95719 in vbox for trunk/src/VBox/Additions/WINNT/Installer

Timestamp:

Jul 18, 2022 5:52:27 PM (3 years ago)

Author:

vboxsync

Message:

Windows Additions/Installer: Also install the legacy VBox TS CA on Win10+ guests, as those would complain about untrusted certification chains otherwise. ​bugref:8691

File:

• trunk/src/VBox/Additions/WINNT/Installer/VBoxGuestAdditionsW2KXP.nsh (modified) (2 diffs)

trunk/src/VBox/Additions/WINNT/Installer/VBoxGuestAdditionsW2KXP.nsh

@@ -170 +170 @@
 !ifdef VBOX_SIGN_ADDITIONS && VBOX_WITH_VBOX_LEGACY_TS_CA
   ; On guest OSes < Windows 10 we always go for the PreW10 drivers and install our legacy timestamp CA.
-  ${If} $g_strWinVersion != "10"
+  ; Note: We now also install this on Win10+ guests, as those would complain about untrusted certification chains otherwise.
+  ;${If} $g_strWinVersion != "10"
     ${LogVerbose} "Installing legacy timestamp CA certificate ..."
     SetOutPath "$INSTDIR\cert"
@@ -177 +178 @@
     ${CmdExecute} "$\"$INSTDIR\cert\VBoxCertUtil.exe$\" add-trusted-publisher --root $\"$INSTDIR\cert\vbox-legacy-timestamp-ca.cer$\"" "false"
     ${CmdExecute} "$\"$INSTDIR\cert\VBoxCertUtil.exe$\" display-all" "false"
-  ${EndIf}
+  ;${EndIf}
 !endif