Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

powershell Get-AuthenticodeSignature fails intermittently

See original GitHub issue

Version: 19.55.2

2.20.1

Target: Win32 (x64)

Hi friends, firstly thanks for all the work you guys put into this library. It’s great.

We have an app in production which uses the electron-updater & electron-builder libraries. The builds and uploads to servers are flawless, and everything is code-signed with a cert from Digicert. 99% of our users are able to update without issues, but ~1-3% send an error like the one below,

Command failed: powershell.exe -NoProfile -NonInteractive -Command Get-AuthenticodeSignature 'C:\Users\wmser\AppData\Local\Temp\up-uLClKA\Blitz Web Setup 0.4.8.exe' | ConvertTo-Json -Compress

in the file

at verifySignature (C:\Program Files\Blitz\resources\app.asar\node_modules\electron-updater\src\windowsExecutableCodeSignatureVerifier.ts:11:3)
at C:\Program Files\Blitz\resources\app.asar\node_modules\electron-updater\src\NsisUpdater.ts:88:18

We’ve reached out and talked to users who ran into this issue, and it normally results in an inability to update the application (sometimes until the next boot, sometimes permanently without a re-install). We tried doing some debugging around the command, but since the bug isn’t 100% repro, didn’t get any luck.

Both the updating version, and the new version are code-signed with the exact same certificate.

Thanks, Jonathan