July 2010 - Installer-dev - lists.apple.com

Re: Installer versions and revert consent
by Jon Hodgson 06 Jul '10

06 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=kam2D1BlFs8qH58bihE8s7+7BSgSBJJTakaRhWvVADk=; b=Yeu3lqi2SYY3wRhN/R8Is0qz8xS9lYIY0Upq4ReeCdJLO3sC9djvB7Vb2XxV/5ELc9 R9d1NYfHqjdK5+76/MfKdT6w2SXjz6vW7g6bA63Onj5SF48o4JE9SYP82ZEzLfIxdPV5 lN68P731cXNsov1XoaMO5uBTeym+1cMNBf50Y= Domainkey-signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=R7VVICmOXXeNDrkT1Qgxr8P/0dYdb2DFldY2Aj77qSH3rYqDN8qoqQZbQSvFNQrk0h 0JB3tH1mXS/fqIscC+KinibHH8OgDloR/2UNfdv9kNnL4I4fyiw+E8hpuKmbfJJSMBSF mB86PadXekYdZgiTe7oEkSaigk+4rtFFW/CpY= But what about the revert consent flag? Surely if that is not said and the installer version is less than the installed version, it shouldn't allow "upgrade"? On Mon, Jul 5, 2010 at 10:55 PM, Iceberg-Dev <dev.iceberg(a)gmail.com> wrote: > > On Jul 5, 2010, at 5:32 PM, Jon Hodgson wrote: > >> What I need to know is.. >> >> Is that just how it works, basically ignoring the version info? >> >> And, if not >> >> What might be going wrong? Which version entry is the important one? >> What format does it have to be to work? > > I would tend to believe that the wording here is not deeply connected to the > real operation. > > For instance, in some OS versions, when you're upgrading, the main button is > labeled "Update" (IIRC). With recent versions, it's labeled "Install". > > In the case you're describing the algorithm is probably as you wrote: > > if there's never been a version of the package on disk then it's an install. > > if there has been a version of the package, it's an upgrade. > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Installer-dev mailing list (Installer-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/installer-dev/jonhodgson.devlists%40… > > This email sent to jonhodgson.devlists(a)googlemail.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Installer versions and revert consent
by Iceberg-Dev 05 Jul '10

05 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:mime-version:in-reply-to :references:content-type:message-id:content-transfer-encoding:from :subject:date:to:x-mailer; bh=QWgEvSPs8AycG1utxT/jCdXDi/TC1w8LnV9KdIcPR2c=; b=KCRRY4VAFhSpl2Zhyd18cfcVjDk1bICridPF1EI+hCzkVT0iplFsZXd/6qWWOhdG+a SwXl5wAlZSzhLSVhVrQOOl+uAFy+bcxyk1Zlo4BsPnrO25G39N3gzH5uhdf2TS9wNy4w 8XsNSZBi6NsrDs1JzrAu4X5LgMVzxFCHtEYHE= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:content-type:message-id :content-transfer-encoding:from:subject:date:to:x-mailer; b=lv9Cix6vND+MyR+zld8wE0FwYLecODh/c7E0wCRU36MC00/Ay8rp3hK11novb5cG8C cJC8BB2N5+oJmd7F6hmkP0wmrpXA8O50Oq9ZFrwcWkd79q2HtEXopv2s9yNNJglJIR1T uN6lolxk61GbNDvOSKIEHxZV9+3crBQtzqY2w= On Jul 5, 2010, at 5:32 PM, Jon Hodgson wrote: What I need to know is.. Is that just how it works, basically ignoring the version info? And, if not What might be going wrong? Which version entry is the important one? What format does it have to be to work? In the case you're describing the algorithm is probably as you wrote: if there has been a version of the package, it's an upgrade. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… I would tend to believe that the wording here is not deeply connected to the real operation. For instance, in some OS versions, when you're upgrading, the main button is labeled "Update" (IIRC). With recent versions, it's labeled "Install". if there's never been a version of the package on disk then it's an install. This email sent to site_archiver(a)lists.apple.com

1 0

Installer versions and revert consent
by Jon Hodgson 05 Jul '10

05 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:cc:content-type; bh=znK60vN32h00LWWeD7siJY0TSWpLooDwTWTmd36IIZ4=; b=Ho1n660nF85Om3vDILZVe/jUU/VdQGAQwG82vIvR+GDe5S7PoT62Hgh3jZdQ6dSOww SUfosJJ+pKxj0ODz3fl8gH2RO/NxBbIRnnjRP3c3sKSYsy6DPBaVu4Vrdntwybh3tThk zSwJhnJVqOwtmyvenSqtfdDCRUwQtxVWF8FMc= Domainkey-signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:cc:content-type; b=eSgsiAKyPYCNzMmf4Z3Zxk4fQjVJlYpKDA4jLwgcyqHLefJsnDwnNTjnsGVNnFTRJ1 PwbCJN22gX6L/GsfTpWeeHC2WmMg90Qjg+svJoKdI1KTetkDYe2b2xLLVlqbAe629Zwk jGX7vEYbVTQJ3ZYlMX1auDK/y4yiV6IKZIFoI= After much messing about and not getting what I've wanted I've found the best solution to my problem to be to use iceberg to build component packages, and then a perl script and some templates to put them all into one distribution package. So far so good... However, version numbers and revert consent seem to make no difference. The distribution package always shows the custom install page, which is intentional. First time I install anything, all the options have "install" next to them... as they should. New version of something already installed, they say "upgrade"... makes sense to me. But if I run the same installer again, it still says "upgrade", even though it's the same version. And it seems if I run an earlier installer, it still says "upgrade", even though it would be a downgrade, and even if revert consent was turned off in that component package. What I need to know is.. Is that just how it works, basically ignoring the version info? And, if not What might be going wrong? Which version entry is the important one? What format does it have to be to work? regards Jon _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Digital Signing
by Iceberg-Dev 01 Jul '10

01 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:mime-version:in-reply-to :references:content-type:message-id:content-transfer-encoding:from :subject:date:to:x-mailer; bh=nwm1XDsTsyvX/IJk777KvrDdVPJVvINOzOMjBhTX7sg=; b=kk9ZoxiC5a3+dzMIZ6vbvAl82U3LG0iAHDBBuA8ty6LUgcYqAqew+Ii8mr9EI8Ijf/ BaIYRa0RduGjPExVRp8pnHOYL5XjVqjAdauGLHjkGscs+h/jAEpKXZSVTEq4u9k2O9vc UTbCLq8CmaHTyDr+ASTT0wh8zlH95o4AMa/kg= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:content-type:message-id :content-transfer-encoding:from:subject:date:to:x-mailer; b=CQuC42K6842vxT1AmFIU+AFggskbUHEBbx4FWXEUYh8REU8YAxii5GdN6QOaUlTaKH meo7/OQ2jCkH54NWibM3O3fOELcVmu1cV5X77qZ5nuv0xsKO2Bdwpa2upMHiwV8UfHp/ DbfjODjS0CQzvQyihC8uQG4f8+j0MLnprXFKo= On Jul 1, 2010, at 4:54 PM, Phillip Kehoe wrote: http://lists.apple.com/archives/Installer-dev/2009/Sep/msg00055.html _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… Thanks for the help Paul. Took a look in the console and my error message is CSSMERR_TP_NOT_TRUSTED. Did a little research and found a previous discussion on the topic. >From reading that it appears it's the same issue and 10.6 hasn't been updated yet (which is what I'm running on). Self signed certificates are not working for instance but some certificates are. I also used one from Comodo with success. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Digital Signing
by Paul Sanders 01 Jul '10

01 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Digital Signing
by Phillip Kehoe 01 Jul '10

01 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com User-agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.10) Gecko/20100621 Fedora/3.0.5-1.fc13 Thunderbird/3.0.5 http://lists.apple.com/archives/Installer-dev/2009/Sep/msg00055.html _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com Thanks for the help Paul. Took a look in the console and my error message is CSSMERR_TP_NOT_TRUSTED. Did a little research and found a previous discussion on the topic. >From reading that it appears it's the same issue and 10.6 hasn't been updated yet (which is what I'm running on). On 07/01/2010 10:17 AM, Paul Sanders wrote: > Is there anyway I can see an error code or something that might give me more insight into why this is failing? Thanks for any help. You can look in Installer.log in /Applications/Utilities/Console.app. There might be something logged there, but Package Maker's error reporting is not exactly its strong point. Regards, Paul Sanders. smime.p7s

1 0

Re: Digital Signing
by Paul Sanders 01 Jul '10

01 Jul '10

site_archiver(a)lists.apple.com Delivered-To: installer-dev(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Digital Signing
by Phillip Kehoe 01 Jul '10

01 Jul '10

site_archiver(a)lists.apple.com Delivered-To: Installer-dev(a)lists.apple.com User-agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.10) Gecko/20100621 Fedora/3.0.5-1.fc13 Thunderbird/3.0.5 Phil Kehoe Cengen Inc. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com I work at a company that develops Unix based command line programs. In Linux we distribute this software through signed RPMs. Our software also works on OS X however our users need to build from source. I am currently looking into using PackageMaker to install these compiled command line programs. Everything seems to be working fine except for the last step. I am trying to digitally sign the installer similarly to how we sign RPMs on Linux machines. We have a code signing certificate that has been issued by GoDaddy.com. In the "Configuration" tab under the "Distribution" section I select the Certificate option and select our certificate. Then I build and run in the installer. Once the installer has launched I see a little certificate icon in the upper right hand corner. I click it and it tells me that "This certificate is valid". I proceed with the install and I get to the point where it ask for the admin password and begins the install. At that point I get an error stating that "There were errors with the installation. You may want to try installing again." I don't get these errors when the installer has not been signed, the installation finishes properly. This led me to believe that I hadn't installed my certificate correct. So I started to play around with codesign. That allowed me to sign our executable and then I verified it on another Mac. The only other info that might help (not sure) is that since this is a UNIX like application is we install to the /usr directory instead of the normal Applications directory like most Mac apps do. Is there anyway I can see an error code or something that might give me more insight into why this is failing? Thanks for any help. smime.p7s

1 0