March 2012 - Installer-dev - lists.apple.com

Installation error
by Vinayak Pai 30 Mar '12

30 Mar '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

RE: Signature not detected when trying to run a signed package(downloaded from safari)
by Prema Kumar 29 Mar '12

29 Mar '12

Hi, We were using Developer ID Application certificate. Now we tried with Developer ID Installer certificate. But still the packagemaker command fails. But productsign command works perfectly. Thanks Prema -----Original Message----- From: installer-dev-bounces+prema.kumar=efi.com(a)lists.apple.com [mailto:installer-dev-bounces+prema.kumar=efi.com@lists.apple.com] On Behalf Of Stephane Sudre Sent: Thursday, March 29, 2012 3:03 PM To: installer-dev(a)lists.apple.com Subject: Re: Signature not detected when trying to run a signed package(downloaded from safari) Try productsign . I'm assuming that you are using the Developer ID Installer certificate and not the Developer ID Application certificate for the package/distribution. On Thu, Mar 29, 2012 at 8:27 AM, Vikram Singh <vikram731(a)gmail.com> wrote: > Hi, > > I am having some weird problem in signing my installer packages. Following > are the details- > I have a developer id certificate. I have tried signing using "packagemaker > --sign" and "codesign" utility. > Whenever I sign the packages, it successfully signs it. > Then I downloaded that package and tried running it. It pops up a dialog > saying that "It is not validly signed and may damage your computer". > However, when I try to check if the package is signed using "pkgutil > --check-signature" , it tells me that the package is signed and shows the > certificate chain. > > Does anybody know what might be causing this problem? If the package is > signed, the message should not popup. Is my developer id certificate not > valid? I am doing this for 10.8 support so that my packages get installed > when users have GateKeeper activated. So any help on this will be really > useful. > > Thanks, > Vikram > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Installer-dev mailing list (Installer-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/installer-dev/dev.iceberg%40gmail.c… > > This email sent to dev.iceberg(a)gmail.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/prema.kumar%40efi.com This email sent to prema.kumar(a)efi.com Confidentiality notice: This message may contain confidential information. It is intended only for the person to whom it is addressed. If you are not that person, you should not use this message. We request that you notify us by replying to this message, and then delete all copies including any contained in your reply. Thank you. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Signature not detected when trying to run a signed package(downloaded from safari)
by Stephane Sudre 29 Mar '12

29 Mar '12

Try productsign . I'm assuming that you are using the Developer ID Installer certificate and not the Developer ID Application certificate for the package/distribution. On Thu, Mar 29, 2012 at 8:27 AM, Vikram Singh <vikram731(a)gmail.com> wrote: > Hi, > > I am having some weird problem in signing my installer packages. Following > are the details- > I have a developer id certificate. I have tried signing using "packagemaker > --sign" and "codesign" utility. > Whenever I sign the packages, it successfully signs it. > Then I downloaded that package and tried running it. It pops up a dialog > saying that "It is not validly signed and may damage your computer". > However, when I try to check if the package is signed using "pkgutil > --check-signature" , it tells me that the package is signed and shows the > certificate chain. > > Does anybody know what might be causing this problem? If the package is > signed, the message should not popup. Is my developer id certificate not > valid? I am doing this for 10.8 support so that my packages get installed > when users have GateKeeper activated. So any help on this will be really > useful. > > Thanks, > Vikram > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Installer-dev mailing list (Installer-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/installer-dev/dev.iceberg%40gmail.c… > > This email sent to dev.iceberg(a)gmail.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Signature not detected when trying to run a signed package(downloaded from safari)
by Vikram Singh 29 Mar '12

29 Mar '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Signature not detected when trying to run a signed package(downloaded from safari)
by Vikram Singh 29 Mar '12

29 Mar '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Is there any way to check if a package is signed?
by Vikram Singh 29 Mar '12

29 Mar '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: pkgutil --unlink doesn't remove files?
by Greg Neagle 28 Mar '12

28 Mar '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

RE: pkgutil --unlink doesn't remove files?
by Prema Kumar 28 Mar '12

28 Mar '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Is there any way to check if a package is signed?
by Greg Neagle 26 Mar '12

26 Mar '12

Under Lion: pkgutil --check-signature <PKGNAME> -Greg On Mar 22, 2012, at 12:02 AM, Vikram Singh wrote: > Hi, > > Recently, I have been trying to sign my packages using developer id certificates to make them run on OSX 10.8. I am signing the packages using packagemaker --sign command. > Is there any way to know if a package is already signed and get the details about the developer certificate that was used to sign that package? > Any help will be greatly appreciated. > > Thanks, > Vikram > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Installer-dev mailing list (Installer-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/installer-dev/greg.neagle%40disneya… > > This email sent to greg.neagle(a)disneyanimation.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Is there any way to check if a package is signed?
by Stephane Sudre 22 Mar '12

22 Mar '12

Manually, you can check the top right corner of the Installer window and look for the certificate icon: http://support.apple.com/kb/HT5044 If I were you, I would check the signed package on a system where the intermediate certificate is not installed. Check also: /usr/bin/productsign Also I hope that the Installer certificate is not impacted by the strange "limitations" of the Application certificate: http://mjtsai.com/blog/2012/03/20/developer-id-gotcha/ On Thu, Mar 22, 2012 at 12:02 AM, Vikram Singh <vikram731(a)gmail.com> wrote: > Hi, > > Recently, I have been trying to sign my packages using developer id > certificates to make them run on OSX 10.8. I am signing the packages using > packagemaker --sign command. > Is there any way to know if a package is already signed and get the details > about the developer certificate that was used to sign that package? > Any help will be greatly appreciated. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0