Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Installer hash does not match; this cannot be overridden when running as admin #177279

Open
2 tasks done
ivonenchev opened this issue Oct 3, 2024 · 8 comments
Open
2 tasks done
Labels
Error-Hash-Mismatch The InstallerSHA256 Hash specified in the manifest doesn't match with the InstallerURL hash Package-Update This package needs to be updated

Comments

@ivonenchev
Copy link

Please confirm these before moving forward

  • I have searched for my issue and not found a work-in-progress/duplicate/resolved issue.
  • I have not been informed if the issue is resolved in a preview version of the winget client.

Category of the issue

Installation issue.

Brief description of your issue

When I try to install the following packages :

Bandisoft.Bandizip
GOMLab.GOMPlayer
TeamViewer.TeamViewer
Ubisoft.Connect
Rakuten.Viber
DoomsdayEngine.DoomsdayEngine

Steps to reproduce

winget install Bandisoft.Bandizip GOMLab.GOMPlayer TeamViewer.TeamViewer Ubisoft.Connect Rakuten.Viber DoomsdayEngine.DoomsdayEngine

Actual behavior

Installer hash does not match; this cannot be overridden when running as admin

Expected behavior

To be installed

Environment

PS C:\Users> winget --info
Windows Package Manager v1.8.1911
Copyright (c) Microsoft Corporation. All rights reserved.

Windows: Windows.Desktop v10.0.26100.1882
System Architecture: X64
Package: Microsoft.DesktopAppInstaller v1.23.1911.0

Winget Directories
-------------------------------------------------------------------------------------------------------------------------------
Logs                               %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\DiagOutputDir
User Settings                      %LOCALAPPDATA%\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe\LocalState\settings.json
Portable Links Directory (User)    %LOCALAPPDATA%\Microsoft\WinGet\Links
Portable Links Directory (Machine) C:\Program Files\WinGet\Links
Portable Package Root (User)       %LOCALAPPDATA%\Microsoft\WinGet\Packages
Portable Package Root              C:\Program Files\WinGet\Packages
Portable Package Root (x86)        C:\Program Files (x86)\WinGet\Packages
Installer Downloads                %USERPROFILE%\Downloads

Links
---------------------------------------------------------------------------
Privacy Statement   https://aka.ms/winget-privacy
License Agreement   https://aka.ms/winget-license
Third Party Notices https://aka.ms/winget-3rdPartyNotice
Homepage            https://aka.ms/winget
Windows Store Terms https://www.microsoft.com/en-us/storedocs/terms-of-sale

Admin Setting                             State
--------------------------------------------------
LocalManifestFiles                        Disabled
BypassCertificatePinningForMicrosoftStore Disabled
InstallerHashOverride                     Disabled
LocalArchiveMalwareScanOverride           Disabled
ProxyCommandLineOptions                   Disabled
DefaultProxy                              Disabled
PS C:\Users>

Screenshots and Logs

No response

@ivonenchev ivonenchev added the Issue-Bug It either shouldn't be doing this or needs an investigation. label Oct 3, 2024
Copy link

We've found some similar issues:

If any of the above are duplicates, please consider closing this issue out and adding additional context in the original issue.

Note: You can give me feedback by 👍 or 👎 this comment.

@microsoft-github-policy-service microsoft-github-policy-service bot added Needs-Triage This work item needs to be triaged by a member of the core team. Package-Update This package needs to be updated Error-Hash-Mismatch The InstallerSHA256 Hash specified in the manifest doesn't match with the InstallerURL hash and removed Issue-Bug It either shouldn't be doing this or needs an investigation. labels Oct 3, 2024
@ivonenchev
Copy link
Author

For this package IObit.DriverBooster
Installer hash does not match; this cannot be overridden when running as admin

@Dragon1573
Copy link
Contributor

You currently mentioned 7 packages. Could you please split them into 7 unique issues?

  • Bandisoft.Bandizip
  • GOMLab.GOMPlayer
  • TeamViewer.TeamViewer
  • Ubisoft.Connect
  • Rakuten.Viber
  • DoomsdayEngine.DoomsdayEngine
  • IObit.DriverBooster

@Dragon1573
Copy link
Contributor

Issue with package identifier TeamViewer.TeamViewer seems already resolved. Can't reproduce on my device.

19:42:30 D:\...\winget-pkgs  [master ≡] 0ms pwsh> winget download -e --id TeamViewer.TeamViewer
Found TeamViewer [TeamViewer.TeamViewer] Version 15.58.5
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://download.teamviewer.com/download/TeamViewer_Setup_x64.exe
  ██████████████████████████████  66.7 MB / 66.7 MB
Successfully verified installer hash
Installer downloaded: D:\Dragon1573\Downloads\TeamViewer.TeamViewer_15.58.5\TeamViewer_15.58.5_Machine_X64_nullsoft_en-US.exe

@Dragon1573
Copy link
Contributor

Issue with package identifier Ubisoft.Connect seems already resolved. Can't reproduce on my device.

19:57:12 D:\...\winget-pkgs  [master ≡] 0ms pwsh> winget download -e --id Ubisoft.Connect
Found Ubisoft Connect [Ubisoft.Connect] Version 157.1.0.11142
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://static3.cdn.ubi.com/orbit/launcher_installer/UbisoftConnectInstaller.exe
  ██████████████████████████████   217 MB /  217 MB
Successfully verified installer hash
Installer downloaded: D:\Dragon1573\Downloads\Ubisoft.Connect_157.1.0.11142\Ubisoft Connect_157.1.0.11142_Machine_X86_nullsoft_en-US.exe

@Dragon1573
Copy link
Contributor

Package identifier Rakuten.Viber uses a vanity URL for installer downloading. Currently it points to a newer version. Outdated manifests should be removed.

20:00:15 D:\...\winget-pkgs  [master ≡] 23ms pwsh> winget download -e --id Rakuten.Viber
Found Viber [Rakuten.Viber] Version 23.6.0.0
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://download.cdn.viber.com/desktop/windows/ViberSetup.msi?t=20240906
  ██████████████████████████████   105 MB /  105 MB
Installer hash does not match; to override this check use --ignore-security-hash

20:01:24 D:\...\winget-pkgs  [master ≡] 59.96s 0x8A150011 pwsh> winget download --ignore-security-hash -e --id Rakuten.Viber
Found Viber [Rakuten.Viber] Version 23.6.0.0
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://download.cdn.viber.com/desktop/windows/ViberSetup.msi?t=20240906
  ██████████████████████████████   105 MB /  105 MB
Installer hash does not match; proceeding due to --ignore-security-hash
Installer downloaded: D:\Dragon1573\Downloads\Rakuten.Viber_23.6.0.0\Viber_23.6.0.0_Machine_X64_wix_en-US.msi

20:01:59 D:\...\winget-pkgs  [master ≡] 20.394s pwsh> komac analyse 'D:\Dragon1573\Downloads\Rakuten.Viber_23.6.0.0\Viber_23.6.0.0_Machine_X64_wix_en-US.msi'
InstallerLocale: en-US
Architecture: x64
InstallerType: wix
Scope: user
InstallerUrl: https://www.example.com/
InstallerSha256: 82BBF0A20548FE7B71E2BAE3A87F67E887F5E3B35F2510DCA0B9660511B0E0E6
ProductCode: '{2C4DC74E-6625-49F3-8656-2D7D6CF37E98}'
AppsAndFeaturesEntries:
- DisplayName: Viber
  Publisher: 2010-2024 Viber Media S.a.r.l
  DisplayVersion: 23.7.0.2
  ProductCode: '{2C4DC74E-6625-49F3-8656-2D7D6CF37E98}'
  UpgradeCode: '{CC3C191E-4119-4AB3-917A-96EAC8774E60}'

20:03:18 D:\...\winget-pkgs  [master ≡] 0ms pwsh> komac show --installer-manifest Rakuten.Viber
PackageIdentifier: Rakuten.Viber
PackageVersion: 23.6.0.0
UpgradeBehavior: install
Protocols:
- viber
Installers:
- Architecture: x64
  InstallerType: burn
  Scope: user
  InstallerUrl: https://download.cdn.viber.com/desktop/windows/ViberSetup.exe?t=20240906
  InstallerSha256: 2BBE0A8C8A0013C915D1A68551A5BA84E6B381E4983B4B8C6AB5B165A4F7F6A6
  InstallModes:
  - interactive
  - silent
  InstallerSwitches:
    SilentWithProgress: /quiet /norestart
  ProductCode: '{05077BC6-E842-48C1-BDB5-2D7233F677E3}'
  AppsAndFeaturesEntries:
  - ProductCode: '{05077BC6-E842-48C1-BDB5-2D7233F677E3}'
    UpgradeCode: '{E01CB858-ABEC-4384-BFBF-985024A4A8DB}'
- Architecture: x64
  InstallerType: wix
  Scope: machine
  InstallerUrl: https://download.cdn.viber.com/desktop/windows/ViberSetup.msi?t=20240906
  InstallerSha256: 2EEDC051C9002EE99060FC2343E4B17086E3DA48460E40600DEB0C1FD8CA06A4
  ProductCode: '{C816D618-59D4-4720-9FB1-6ECA1144132C}'
  AppsAndFeaturesEntries:
  - ProductCode: '{EF02950C-232E-4FD6-BF1A-9CAD88151CE2}'
    UpgradeCode: '{CC3C191E-4119-4AB3-917A-96EAC8774E60}'
ManifestType: installer
ManifestVersion: 1.6.0

@Dragon1573
Copy link
Contributor

It seems there's something wrong with the InstallerUrl of package identifier DoomsdayEngine.DoomsdayEngine. PHP backend server of the InstallerUrl crashed.

image

@Dragon1573
Copy link
Contributor

Issue with package identifier IObit.DriverBooster seems already resolved. Can't reproduce on my device.

20:19:14 D:\...\winget-pkgs  [master ≡] 0ms pwsh> winget download -e --id IObit.DriverBooster
Found Driver Booster [IObit.DriverBooster] Version 12.0.0
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://cdn.iobit.com/dl/driver_booster_setup.exe
  ██████████████████████████████  30.5 MB / 30.5 MB
Successfully verified installer hash
Installer downloaded: D:\Dragon1573\Downloads\IObit.DriverBooster_12.0.0\Driver Booster_12.0.0_Machine_X86_inno_hy-AM.exe

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Error-Hash-Mismatch The InstallerSHA256 Hash specified in the manifest doesn't match with the InstallerURL hash Package-Update This package needs to be updated
Projects
None yet
Development

No branches or pull requests

3 participants