Re: Verify productsign on flat packages
Re: Verify productsign on flat packages
- Subject: Re: Verify productsign on flat packages
- From: Stephane Sudre <email@hidden>
- Date: Fri, 26 Oct 2012 09:22:19 +0200
On Fri, Oct 26, 2012 at 7:15 AM, Khushneet Inder Singh <email@hidden> wrote:
> Hi,
>
> Thanks for reply, but the "--check-signature" option in pkgutil was
> introduced later in 10.7(Lion). So for me the problem remains the same ,
> I am still unable to verify signature on snow leopard and leopard.
Considering that a flat package/distribution is a xar archive, a
solution could be to:
1. extract the certificates from the archive either using --dump-toc
and some XML parsing or using a fork of the xar project:
http://mackyle.github.com/xar/howtosign.html
2. use 'openssl x509' to retrieve the information you need.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden