Cocoa-dev

Download

cocoa-dev@lists.apple.com

January 2023

1 participants
1 discussions

Re: Code signing checking
by Stephane Sudre via Cocoa-dev 30 Jan '23

30 Jan '23

site_archiver(a)lists.apple.com Delivered-To: cocoa-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=+wQPAFxshQ88W3Na5Zox43+TnUZHI6msBvQRgwYjlD0=; b=Xo0knKTHhkGL7pD3U++QHrehTvALK6SkF6tk8rqHa0wr8laoJbMdVoXrJVGYEGVzJl mfJsuhsgobQDNaLcyGPM2YWn4nQQEdKpcT2elV5+iKaixiie2ow8P2Leb0uMhxFEnbW6 +Q4l2V/0pEYoS78Yl27tOkx5mt31irwzv+v5yP9EfYqXhtfBCIICVxEsBz7ypJRxwCpq GPfVu8ytOPqdyAgRaMvJjUTUdZp3qIb473WTQiom3PFcirIa+VBmHUyM5p8N7XBmTr9b RiSOKLA3pakI1l4Byk6SceMlHcV5eIJ03w03KD+vtc8eq9Xzy9LPog4Huexc15QqMwWY nQog== Is this to prevent your executable from loading plugins that are not signed with your team ID? Because, in this case, this would look like what the Hardened runtime does. On Fri, Jan 6, 2023 at 9:29 PM Aandi Inston via Cocoa-dev < cocoa-dev(a)lists.apple.com> wrote: > Is there any API for doing the following activities related to code > signing? > - Check that the signature on the running codesigned executable is from the > same company as the signature on a bundle? > OR > - Get the company from the codesigned running executable and > - Get the company from a signature on a bundle > (so we can check they are the same). > > I think this can be done calling and reading output from the codesign CLI, > but an API seems tidier. > > Reference to detailed reading is fine!! > Thanks in advance! > _______________________________________________ > > Cocoa-dev mailing list (Cocoa-dev(a)lists.apple.com) > > Please do not post admin requests or moderator comments to the list. > Contact the moderators at cocoa-dev-admins(at)lists.apple.com > > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/cocoa-dev/dev.iceberg%40gmail.com > > This email sent to dev.iceberg(a)gmail.com > -- Packaging Resources - http://s.sudre.free.fr/Packaging.html _______________________________________________ Cocoa-dev mailing list (Cocoa-dev(a)lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/cocoa-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0