• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Signing with packagemaker
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Signing with packagemaker


  • Subject: Re: Signing with packagemaker
  • From: Mitchell Laurren-Ring <email@hidden>
  • Date: Mon, 21 May 2012 23:53:33 -0700

We have to build on 10.6/Xcode 3.x and productsign isn't available. 

/Mick
Sent from my iPad

On May 21, 2012, at 21:48, Prema Kumar <email@hidden> wrote:

Hi,

We have phased the same issue when we used the “packagemaker” command to sign the installer. We used the following command to sign. This will solve the problem.

 

productsign --sign

 

regards

Prema

 

 

From: installer-dev-bounces+prema.kumar=email@hidden [mailto:installer-dev-bounces+prema.kumar=email@hidden] On Behalf Of Mitchell Laurren-Ring
Sent: Tuesday, May 22, 2012 7:01 AM
To: email@hidden
Subject: Signing with packagemaker

 

Can the packagemaker command line tool still be used for signing installer packages? 

 

I'm using --root to build my package and then using the --sign/--certificate options to sign it. The certificate I'm using is the "install" certificate I got from Apple.

 

The installer runs fine from my build machine, but after I download it from our website, Finder reports that it may be "damaged" and advises I unmount the disk image.

 

When I run pkgutil --check-signature:

 

Package "MyPkg.pkg":

   Status: signed by a certificate trusted by Mac OS X

   Certificate Chain:

    1. Developer ID Installer: Coupons.com Incorporated

    2. Developer ID Certification Authority

    3. Apple Root CA

 

Running spctl -a -v --type install on the package gives me:

 

 CSSMERR_TP_NOT_TRUSTED

 

 

Advice anyone?

 

/Mick

 

 

 



Confidentiality notice: This message may contain confidential information. It is intended only for the person to whom it is addressed. If you are not that person, you should not use this message. We request that you notify us by replying to this message, and then delete all copies including any contained in your reply. Thank you.
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

  • Follow-Ups:
    • Re: Signing with packagemaker
      • From: Stephane Sudre <email@hidden>
    • Re: Signing with packagemaker
      • From: Rustam Muginov <email@hidden>
References: 
 >Signing with packagemaker (From: Mitchell Laurren-Ring <email@hidden>)
 >RE: Signing with packagemaker (From: Prema Kumar <email@hidden>)

  • Prev by Date: Re: Trying to import old .pkg bundles into flat distribution
  • Next by Date: Re: Signing with packagemaker
  • Previous by thread: RE: Signing with packagemaker
  • Next by thread: Re: Signing with packagemaker
  • Index(es):
    • Date
    • Thread