Re: Expiration of Developer ID Installer certificates
Re: Expiration of Developer ID Installer certificates
- Subject: Re: Expiration of Developer ID Installer certificates
- From: Brian Kendall <email@hidden>
- Date: Thu, 10 Aug 2017 16:02:03 -0400
Prema et al,
> On Aug 4, 2017, at 2:32 AM, Prema Kumar <email@hidden> wrote:
>
> Hi,
> According to the following link new installations will not work.
>
> https://developer.apple.com/support/certificates
> <https://developer.apple.com/support/certificates>/
> Read the section "Developer ID Installer Certificate (Mac applications)”
I've read the text, and the reason for my earlier email to this list (and I
believe for Paul as well) is that even though this page reads:
• Developer ID Installer Certificate (Mac applications)
If your certificate expires, users can no longer launch installer packages for
your Mac applications that were signed with this certificate. Previously
installed apps will continue to run however new installations will not be
possible until you have re-signed your installer package with a valid Developer
ID Installer certificate. If your certificate has been revoked, users will no
longer be able to install applications that have been signed with this
certificate.
... that doesn't actually appear to be true! As I said in my previous email, I
set the clock forward past my certificate's expiration date on both a macOS
10.11 and 10.12 system and was still able to run my installer. In 10.11 it even
said the certificate was expired if I clicked the lock icon in Installer.app
but otherwise I could run the installer.
So clearly we have a situation where my results do not line up with Apple's
documentation. So I'm wondering, what is the explanation for this? Do I
actually need to resign all of my old installers, or will users continue to be
able to use them?
Regards,
- Brian
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden