Add eng/Signing.props to sign cab files inside MSI workload packs by rolfbjarne · Pull Request #25192 · dotnet/macios

rolfbjarne · 2026-04-20T08:35:18Z

The VS signing scan flags 42 unsigned cab1.cab files inside macOS SDK and Templates workload pack MSI payloads. The Arcade SDK's default Sign.props does not include a FileExtensionSignInfo for .cab, so the SignTool skips signing them even though .cab is in SignableExtensions.

Add eng/Signing.props with:

FileExtensionSignInfo for .cab -> Microsoft400
UseDotNetCertificate = true (standard for dotnet/* repos)
ItemsToSign entries for *.msi and *.wixpack.zip so the SignTool opens MSI containers and signs embedded cabs

This is recreating #25184 from origin since we can't build from forks.

The VS signing scan flags 42 unsigned cab1.cab files inside macOS SDK and Templates workload pack MSI payloads. The Arcade SDK's default Sign.props does not include a FileExtensionSignInfo for .cab, so the SignTool skips signing them even though .cab is in SignableExtensions. Add eng/Signing.props with: - FileExtensionSignInfo for .cab -> Microsoft400 - UseDotNetCertificate = true (standard for dotnet/* repos) - ItemsToSign entries for *.msi and *.wixpack.zip so the SignTool opens MSI containers and signs embedded cabs

vs-mobiletools-engineering-service2 · 2026-04-20T11:38:05Z

✅ [CI Build #11d6661] Build passed (Build packages) ✅

Pipeline on Agent
Hash: 11d666131148be5b6c4315ff220c982c659c1c74 [PR build]

vs-mobiletools-engineering-service2 · 2026-04-20T11:41:17Z

✅ [CI Build #11d6661] Build passed (Detect API changes) ✅

Pipeline on Agent
Hash: 11d666131148be5b6c4315ff220c982c659c1c74 [PR build]

vs-mobiletools-engineering-service2 · 2026-04-20T11:53:36Z

✅ API diff for current PR / commit

NET (empty diffs)

iOS: vsdrops gist ( No breaking changes )
tvOS: vsdrops gist ( No breaking changes )
MacCatalyst: vsdrops gist ( No breaking changes )
macOS: vsdrops gist ( No breaking changes )

✅ API diff vs stable

NET (empty diffs)

iOS: vsdrops gist ( No breaking changes )
tvOS: vsdrops gist ( No breaking changes )
MacCatalyst: vsdrops gist ( No breaking changes )
macOS: vsdrops gist ( No breaking changes )

ℹ️ Generator diff

Generator Diff: vsdrops (html) vsdrops (raw diff) gist (raw diff) - Please review changes)

Pipeline on Agent
Hash: 11d666131148be5b6c4315ff220c982c659c1c74 [PR build]

vs-mobiletools-engineering-service2 · 2026-04-20T12:04:26Z

✅ [CI Build #11d6661] Build passed (Build macOS tests) ✅

Pipeline on Agent
Hash: 11d666131148be5b6c4315ff220c982c659c1c74 [PR build]

vs-mobiletools-engineering-service2 · 2026-04-20T13:58:58Z

✅ [CI Build #11d6661] Prepare .NET Release succeeded ✅

📦 Published NuGet packages (32 packages)

iOS

Microsoft.iOS.Ref.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.iOS.Runtime.ios-arm64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.iOS.Runtime.ios.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.iOS.Runtime.iossimulator-arm64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.iOS.Runtime.iossimulator-x64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.iOS.Sdk.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.iOS.Templates.26.4.10213-rt.nupkg
Microsoft.iOS.Windows.Sdk.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.NET.Sdk.iOS.Manifest-10.0.300-preview.0.26.4.10213-rt.nupkg

MacCatalyst

Microsoft.MacCatalyst.Ref.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.MacCatalyst.Runtime.maccatalyst-arm64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.MacCatalyst.Runtime.maccatalyst-x64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.MacCatalyst.Runtime.maccatalyst.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.MacCatalyst.Sdk.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.MacCatalyst.Templates.26.4.10213-rt.nupkg
Microsoft.NET.Sdk.MacCatalyst.Manifest-10.0.300-preview.0.26.4.10213-rt.nupkg

macOS

Microsoft.macOS.Ref.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.macOS.Runtime.osx-arm64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.macOS.Runtime.osx-x64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.macOS.Runtime.osx.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.macOS.Sdk.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.macOS.Templates.26.4.10213-rt.nupkg
Microsoft.NET.Sdk.macOS.Manifest-10.0.300-preview.0.26.4.10213-rt.nupkg

tvOS

Microsoft.NET.Sdk.tvOS.Manifest-10.0.300-preview.0.26.4.10213-rt.nupkg
Microsoft.tvOS.Ref.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.tvOS.Runtime.tvos-arm64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.tvOS.Runtime.tvos.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.tvOS.Runtime.tvossimulator-arm64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.tvOS.Runtime.tvossimulator-x64.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.tvOS.Sdk.net10.0_26.4.26.4.10213-rt.nupkg
Microsoft.tvOS.Templates.26.4.10213-rt.nupkg

Other

Sharpie.Bind.Tool.26.4.0.213-rt.nupkg

Pipeline on Agent
Hash: 11d666131148be5b6c4315ff220c982c659c1c74 [PR build]

rolfbjarne · 2026-04-20T15:07:04Z

Publishing worked fine, so this looks good to go: https://devdiv.visualstudio.com/DevDiv/_build/results?buildId=13882703&view=results

vs-mobiletools-engineering-service2 · 2026-04-21T07:52:50Z

🚀 [CI Build #11d6661] Test results 🚀

Test results

✅ All tests passed on VSTS: test results.

🎉 All 156 tests passed 🎉

Tests counts

✅ cecil: All 1 tests passed. Html Report (VSDrops) Download
✅ dotnettests (iOS): All 1 tests passed. Html Report (VSDrops) Download
✅ dotnettests (MacCatalyst): All 1 tests passed. Html Report (VSDrops) Download
✅ dotnettests (macOS): All 1 tests passed. Html Report (VSDrops) Download
✅ dotnettests (Multiple platforms): All 1 tests passed. Html Report (VSDrops) Download
✅ dotnettests (tvOS): All 1 tests passed. Html Report (VSDrops) Download
✅ framework: All 2 tests passed. Html Report (VSDrops) Download
✅ fsharp: All 4 tests passed. Html Report (VSDrops) Download
✅ generator: All 5 tests passed. Html Report (VSDrops) Download
✅ interdependent-binding-projects: All 4 tests passed. Html Report (VSDrops) Download
✅ introspection: All 6 tests passed. Html Report (VSDrops) Download
✅ linker: All 44 tests passed. Html Report (VSDrops) Download
✅ monotouch (iOS): All 11 tests passed. Html Report (VSDrops) Download
✅ monotouch (MacCatalyst): All 15 tests passed. Html Report (VSDrops) Download
✅ monotouch (macOS): All 12 tests passed. Html Report (VSDrops) Download
✅ monotouch (tvOS): All 11 tests passed. Html Report (VSDrops) Download
✅ msbuild: All 2 tests passed. Html Report (VSDrops) Download
✅ sharpie: All 1 tests passed. Html Report (VSDrops) Download
✅ windows: All 3 tests passed. [attempt 3] Html Report (VSDrops) Download
✅ xcframework: All 4 tests passed. Html Report (VSDrops) Download
✅ xtro: All 1 tests passed. Html Report (VSDrops) Download

macOS tests

✅ Tests on macOS Monterey (12): All 5 tests passed. Html Report (VSDrops) Download
✅ Tests on macOS Ventura (13): All 5 tests passed. Html Report (VSDrops) Download
✅ Tests on macOS Sonoma (14): All 5 tests passed. [attempt 3] Html Report (VSDrops) Download
✅ Tests on macOS Sequoia (15): All 5 tests passed. Html Report (VSDrops) Download
✅ Tests on macOS Tahoe (26): All 5 tests passed. Html Report (VSDrops) Download

Linux Build Verification

✅ Linux build succeeded

Pipeline on Agent
Hash: 11d666131148be5b6c4315ff220c982c659c1c74 [PR build]

dalexsoto

🤞

rolfbjarne self-assigned this Apr 20, 2026

rolfbjarne mentioned this pull request Apr 20, 2026

Add eng/Signing.props to sign cab files inside MSI workload packs #25184

Closed

This comment has been minimized.

Sign in to view

rolfbjarne enabled auto-merge (squash) April 20, 2026 15:07

This comment has been minimized.

Sign in to view

dalexsoto approved these changes Apr 22, 2026

View reviewed changes

rolfbjarne merged commit 7e68a96 into main Apr 22, 2026
59 checks passed

rolfbjarne deleted the release-test/rt/sign-cab-files branch April 22, 2026 04:38

jesuszarate mentioned this pull request Apr 23, 2026

Add FileExtensionSignInfo for .cab to fix unsigned cab files inside ANCM MSIs dotnet/aspnetcore#66443

Open

Conversation

rolfbjarne commented Apr 20, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

vs-mobiletools-engineering-service2 commented Apr 20, 2026

✅ [CI Build #11d6661] Build passed (Build packages) ✅

Uh oh!

vs-mobiletools-engineering-service2 commented Apr 20, 2026

✅ [CI Build #11d6661] Build passed (Detect API changes) ✅

Uh oh!

vs-mobiletools-engineering-service2 commented Apr 20, 2026

✅ API diff for current PR / commit

✅ API diff vs stable

ℹ️ Generator diff

Uh oh!

vs-mobiletools-engineering-service2 commented Apr 20, 2026

✅ [CI Build #11d6661] Build passed (Build macOS tests) ✅

Uh oh!

vs-mobiletools-engineering-service2 commented Apr 20, 2026

✅ [CI Build #11d6661] Prepare .NET Release succeeded ✅

iOS

MacCatalyst

macOS

tvOS

Other

Uh oh!

rolfbjarne commented Apr 20, 2026

Uh oh!

This comment has been minimized.

vs-mobiletools-engineering-service2 commented Apr 21, 2026

🚀 [CI Build #11d6661] Test results 🚀

Test results

Tests counts

macOS tests

Linux Build Verification

Uh oh!

dalexsoto left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants