Checksum has changed for IIS-ARR package about choco-packages

[bcc]

Hmm, you're quite right - I see the same checksum on a download, but the WebPI XML doc still has the old checksums listed, which is a concern. X86 is the same too. Looks like they were both recreated on December 2nd, but I'm not sure what the difference is - there's no obvious version bump. I'll see if I can get this change confirmed as being legitimate.

[andmos]

That would be great, not a fan of running with --ignore-checksums when we roll out packages that just point to some MSI's on the big scary internet ;) Thanks in advance!

[bcc]

Indeed. It does have a valid code signature which is a good sign at least. There’s no detail on any of the download pages and they still reference the old version number so I’ll hold off on pushing out a new one until tomorrow just in case.

[bcc]

MS have removed the old webpi XML, but fixed the standalone installer. Given the code signatures are valid, I've pushed a new version of the package, which is currently pending approval from the moderators. Hopefully won't be too long until it's live.

[andmos]

Brilliant. Guess it comes in soon then.

[bcc]

The updated package has just been approved by the moderators.