August 2012 - Installer-dev

Re: Invalid certificate???
by Rustam Muginov 16 Aug '12

16 Aug '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Invalid certificate???
by Howard Moon 14 Aug '12

14 Aug '12

Well, since these posts still haven't appeared in my mailbox, I went ahead and did the signing on my Mountain Lion machine, where the installer certificate is recognized as valid. Just to be sure, I also added --cert "Apple Worldwide Developer Relations Certification Authority" to my productsign commands, even though it didn't seem to be needed on my own Lion partition (which, however, already includes that certificate). That works on my Lion partition, so it should work on others, as well. Fingers crossed! -Howard On Aug 14, 2012, at 2:04 PM, Howard Moon wrote: > Well, that didn't solve the problem. His machine still pops up that dialog. > > I looked in my Keychain Access app on my development machine, and I see that the Developer ID Installer certificate says "This certificate was signed by an unknown authority." I removed that, rebooted, and re-imported it from my Mountain Lion machine, but it still says that. Could this be the problem? Do I need to sign the installers from my Mountain Lion machine, instead of my development Snow Leopard machine? Or is this a problem on HIS end??? > > -Howard > > On Aug 14, 2012, at 11:25 AM, Howard Moon wrote: > >> I *think* I know the answer. Since I do my development on a Snow Leopard machine using Xcode 3.2.x, I had exported my Developer and Installer certificates and imported them on my Snow Leopard machine. I think I need the "intermediate" certificate mentioned in the online docs in order to have productsign properly embed it so that users' machines don't have to already have that on their machines. That should allow the installers to run on machines that haven't installed that certificate already, right? >> >> Can I just export that certificate and import it on my Snow Leopard machine, or do I have to actually do the signing on my Mountain Lion machine? >> >> Thanks, >> -Howard >> >> On Aug 14, 2012, at 11:10 AM, Howard Moon wrote: >> >>> The installer works fine on that same co-worker's Mountain Lion OS, so it looks like an OS issue. >>> >>> He's going to test in Snow Leopard and Leopard, but so far it's only failing on Lion (and he can choose to Continue, anyway, but we don't want *users* to have to make that decision!). >>> >>> Thanks, >>> Howard >>> >>> >>> On Aug 14, 2012, at 10:49 AM, Howard Moon wrote: >>> >>>> Hi all, >>>> >>>> I made a signed installer that checks out fine for me, using a "clean" Mountain Lion OS. But a co-worker who has downloaded the installer to test it is getting a "signed with an invalid certificate" error when running the installer in Lion. What could be the problem? >>>> >>>> Could the server he's taking it from have caused a problem somehow? The .pkg file is in a .zip file (so that I can label it by date and version, for internal testing, and also to prevent the Windows server at our main facility from messing with the file in any way). I don't see how the server could affect the .pkg file when it's contained in a .zip file, though. >>>> >>>> I'm downloading that zip file from my own local server, unzipping it, and then running the resulting .pkg file with no problem on my machines, but could using a zip file have anything to do with why he's getting this error? I wouldn't think so, but I'm grasping at straws here. >>>> >>>> Thanks, >>>> Howard >>>> >>>> >>>> >>> >> > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Invalid certificate???
by Howard Moon 14 Aug '12

14 Aug '12

Well, that didn't solve the problem. His machine still pops up that dialog. I looked in my Keychain Access app on my development machine, and I see that the Developer ID Installer certificate says "This certificate was signed by an unknown authority." I removed that, rebooted, and re-imported it from my Mountain Lion machine, but it still says that. Could this be the problem? Do I need to sign the installers from my Mountain Lion machine, instead of my development Snow Leopard machine? Or is this a problem on HIS end??? -Howard On Aug 14, 2012, at 11:25 AM, Howard Moon wrote: > I *think* I know the answer. Since I do my development on a Snow Leopard machine using Xcode 3.2.x, I had exported my Developer and Installer certificates and imported them on my Snow Leopard machine. I think I need the "intermediate" certificate mentioned in the online docs in order to have productsign properly embed it so that users' machines don't have to already have that on their machines. That should allow the installers to run on machines that haven't installed that certificate already, right? > > Can I just export that certificate and import it on my Snow Leopard machine, or do I have to actually do the signing on my Mountain Lion machine? > > Thanks, > -Howard > > On Aug 14, 2012, at 11:10 AM, Howard Moon wrote: > >> The installer works fine on that same co-worker's Mountain Lion OS, so it looks like an OS issue. >> >> He's going to test in Snow Leopard and Leopard, but so far it's only failing on Lion (and he can choose to Continue, anyway, but we don't want *users* to have to make that decision!). >> >> Thanks, >> Howard >> >> >> On Aug 14, 2012, at 10:49 AM, Howard Moon wrote: >> >>> Hi all, >>> >>> I made a signed installer that checks out fine for me, using a "clean" Mountain Lion OS. But a co-worker who has downloaded the installer to test it is getting a "signed with an invalid certificate" error when running the installer in Lion. What could be the problem? >>> >>> Could the server he's taking it from have caused a problem somehow? The .pkg file is in a .zip file (so that I can label it by date and version, for internal testing, and also to prevent the Windows server at our main facility from messing with the file in any way). I don't see how the server could affect the .pkg file when it's contained in a .zip file, though. >>> >>> I'm downloading that zip file from my own local server, unzipping it, and then running the resulting .pkg file with no problem on my machines, but could using a zip file have anything to do with why he's getting this error? I wouldn't think so, but I'm grasping at straws here. >>> >>> Thanks, >>> Howard >>> >>> >>> >> > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Invalid certificate???
by Howard Moon 14 Aug '12

14 Aug '12

I *think* I know the answer. Since I do my development on a Snow Leopard machine using Xcode 3.2.x, I had exported my Developer and Installer certificates and imported them on my Snow Leopard machine. I think I need the "intermediate" certificate mentioned in the online docs in order to have productsign properly embed it so that users' machines don't have to already have that on their machines. That should allow the installers to run on machines that haven't installed that certificate already, right? Can I just export that certificate and import it on my Snow Leopard machine, or do I have to actually do the signing on my Mountain Lion machine? Thanks, -Howard On Aug 14, 2012, at 11:10 AM, Howard Moon wrote: > The installer works fine on that same co-worker's Mountain Lion OS, so it looks like an OS issue. > > He's going to test in Snow Leopard and Leopard, but so far it's only failing on Lion (and he can choose to Continue, anyway, but we don't want *users* to have to make that decision!). > > Thanks, > Howard > > > On Aug 14, 2012, at 10:49 AM, Howard Moon wrote: > >> Hi all, >> >> I made a signed installer that checks out fine for me, using a "clean" Mountain Lion OS. But a co-worker who has downloaded the installer to test it is getting a "signed with an invalid certificate" error when running the installer in Lion. What could be the problem? >> >> Could the server he's taking it from have caused a problem somehow? The .pkg file is in a .zip file (so that I can label it by date and version, for internal testing, and also to prevent the Windows server at our main facility from messing with the file in any way). I don't see how the server could affect the .pkg file when it's contained in a .zip file, though. >> >> I'm downloading that zip file from my own local server, unzipping it, and then running the resulting .pkg file with no problem on my machines, but could using a zip file have anything to do with why he's getting this error? I wouldn't think so, but I'm grasping at straws here. >> >> Thanks, >> Howard >> >> >> > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Invalid certificate???
by Howard Moon 14 Aug '12

14 Aug '12

The installer works fine on that same co-worker's Mountain Lion OS, so it looks like an OS issue. He's going to test in Snow Leopard and Leopard, but so far it's only failing on Lion (and he can choose to Continue, anyway, but we don't want *users* to have to make that decision!). Thanks, Howard On Aug 14, 2012, at 10:49 AM, Howard Moon wrote: > Hi all, > > I made a signed installer that checks out fine for me, using a "clean" Mountain Lion OS. But a co-worker who has downloaded the installer to test it is getting a "signed with an invalid certificate" error when running the installer in Lion. What could be the problem? > > Could the server he's taking it from have caused a problem somehow? The .pkg file is in a .zip file (so that I can label it by date and version, for internal testing, and also to prevent the Windows server at our main facility from messing with the file in any way). I don't see how the server could affect the .pkg file when it's contained in a .zip file, though. > > I'm downloading that zip file from my own local server, unzipping it, and then running the resulting .pkg file with no problem on my machines, but could using a zip file have anything to do with why he's getting this error? I wouldn't think so, but I'm grasping at straws here. > > Thanks, > Howard > > > _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Invalid certificate???
by Howard Moon 14 Aug '12

14 Aug '12

Hi all, I made a signed installer that checks out fine for me, using a "clean" Mountain Lion OS. But a co-worker who has downloaded the installer to test it is getting a "signed with an invalid certificate" error when running the installer in Lion. What could be the problem? Could the server he's taking it from have caused a problem somehow? The .pkg file is in a .zip file (so that I can label it by date and version, for internal testing, and also to prevent the Windows server at our main facility from messing with the file in any way). I don't see how the server could affect the .pkg file when it's contained in a .zip file, though. I'm downloading that zip file from my own local server, unzipping it, and then running the resulting .pkg file with no problem on my machines, but could using a zip file have anything to do with why he's getting this error? I wouldn't think so, but I'm grasping at straws here. Thanks, Howard _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Testing signed installer?
by Fernando-Juan Santos 14 Aug '12

14 Aug '12

el 09:41 -0700 13/8/12, Howard Moon escribió/écrivait/wrote On Aug 13, 2012, at 7:59 AM, Jim Kelly wrote: Thanks, Howard try this http://clickontyler.com/virtualhostx/ -- saludetes, regards, cordialement un maquero irreverente desde el 1984 Fernando-Juan Santos Hernández -/-------------/\-------------\- iChat: ezMac1964 -\-------------\/-------------/- _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com Alternatively, you could just run your local webserver and "pull it down" from there Unfortunately, Mountain Lion removed the Web Server Preferences Pane option, and it's a pain in the butt to re-enable. I found someone who wrote a replacement Preferences Pane, though, and did exactly as you suggest (since I can't email 20meg files and don't have access to a web server).

1 0

Re: Testing signed installer?
by David Buxton 13 Aug '12

13 Aug '12

On 13 Aug 2012, at 17:41, Howard Moon wrote: > On Aug 13, 2012, at 7:59 AM, Jim Kelly wrote: > >> Alternatively, you could just run your local webserver and "pull it down" from there > > Unfortunately, Mountain Lion removed the Web Server Preferences Pane option, and it's a pain in the butt to re-enable. I found someone who wrote a replacement Preferences Pane, though, and did exactly as you suggest (since I can't email 20meg files and don't have access to a web server). For future reference, you can start a web server listening on port 8000 using this: $ cd /path/to/web/root $ python -m SimpleHTTPServer That will serve the contents of the current directory. Put a different number at the end if you want it to listen on a different port. David B. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Testing signed installer?
by Howard Moon 13 Aug '12

13 Aug '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0

RE: Testing signed installer?
by Jim Kelly 13 Aug '12

13 Aug '12

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists… This email sent to site_archiver(a)lists.apple.com

1 0