由于证书无效,无法安装Microsoft Visual Studio 2017安装程序项目

Question

我一直试图为VS 2017 Professional 安装Microsoft Visual Studio 2017安装程序项目一段时间后没有成功.首先,我尝试了VS2017中的Extensions and Updates向导.它正确下载,但当我关闭VS以启动安装时,如果立即失败,请执行以下操作:

然后我从Visual Studio Marketplace中抓取了VSIX并尝试通过以下命令行安装它:

VSIXInstaller InstallerProjects.vsix

这似乎让我更进一步,但也让我知道证书是问题.不是这样说的Digital Signature: Invalid Certificate:

单击以继续安装后,它会失败并允许我查看日志:

日志似乎在这里回应证书问题:

10/17/2017 1:11:21 PM - Signature Details...
10/17/2017 1:11:21 PM -     Extension is signed with an invalid certificate
10/17/2017 1:11:21 PM -         (PartialChain)      : A certificate chain could not be built to a trusted root authority.
10/17/2017 1:11:21 PM -         (RevocationStatusUnknown): The revocation function was unable to check revocation for the certificate.
10/17/2017 1:11:21 PM -         (OfflineRevocation) : The revocation function was unable to check revocation because the revocation server was offline.

和这里:

10/17/2017 1:15:30 PM - Certificate is invalid: InstallerProjects.vsix
10/17/2017 1:15:36 PM - Skipping Install of 'VSInstallerProjects,version=0.8.4' since downloading it failed.
10/17/2017 1:15:36 PM - Skipping cache of package 'VSInstallerProjects,version=0.8.4' since the package or a parent package had a vital failure.
10/17/2017 1:15:36 PM - Skipping cache of package 'Component.VSInstallerProjects,version=0.8.4' since the package or a parent package had a vital failure.
10/17/2017 1:15:47 PM - Install Error : Microsoft.VisualStudio.Setup.PackageFailureException: Package 'VSInstallerProjects' failed to download
   at Microsoft.VisualStudio.Setup.InstallOperation.Run(CancellationToken token)
   at Microsoft.VisualStudio.Setup.Engine.RunOperation(InstallOperation installOperation, CancellationToken token, ExecuteAction action, ITelemetryOperation telemetryOperation)
   at Microsoft.VisualStudio.Setup.Engine.RunCoreOperation(InstallOperation coreOperation, ExecuteAction action, ITelemetryOperation telemetryOperation, CancellationToken token)
   at Microsoft.VisualStudio.Setup.Engine.Install(Product product, String destination, CancellationToken token)
   at Microsoft.VisualStudio.ExtensionManager.ExtensionEngineImpl.PerformSetupEngineInstall(InstallableExtensionImpl extension, Boolean installPerMachine, Boolean isPackComponent, IDictionary`2 extensionsInstalledSoFar, List`1 extensionsUninstalledSoFar, IInstalledExtensionList modifiedInstalledExtensionsList, IProgress`1 progress, InstallFlags installFlags, AsyncOperation asyncOp, Version targetedVsVersion, IInstalledExtension& newExtension)
   at Microsoft.VisualStudio.ExtensionManager.ExtensionEngineImpl.InstallInternal(InstallableExtensionImpl extension, InstallFlags installFlags, IDictionary`2 extensionsInstalledSoFar, List`1 extensionsUninstalledSoFar, IInstalledExtensionList modifiedInstalledExtensionsList, AsyncOperation asyncOp, IProgress`1 progress, Version targetedVsVersion)
   at Microsoft.VisualStudio.ExtensionManager.ExtensionEngineImpl.BeginInstall(IInstallableExtension installableExtension, InstallFlags installFlags, AsyncOperation asyncOp, Version targetedVsVersion)
   at Microsoft.VisualStudio.ExtensionManager.ExtensionEngineImpl.InstallWorker(IInstallableExtension extension, InstallFlags installFlags, AsyncOperation asyncOp)

对可能发生的事情的任何想法？

Answer 1

...因为吊销服务器离线

不离线，无法联系。在证书可信之前，安装程序必须首先联系 CRL 服务器。它由证书颁发机构维护，这是您自己购买证书时付费的服务之一。证书吊销列表服务器保留一份被证明是伪造的证书的列表。这种情况并没有发生，这是一个非常严重的问题，长期来看可能会损害机器的安全。第一次接触时，VSIX 安装程序会导致安装失败，这是致命的。

此处包含包含故障排除提示的 TechNet 文章。这对 IT 人员来说确实是一个问题，他们需要知道他们正在维护不安全的机器。并且可能首先要对这个问题负责。