site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:mime-version :content-transfer-encoding:message-id:content-type:to:from:subject :date:x-mailer; bh=NrK1blZyFGFG4dlbRSqLvHAnXyMbrMYGF2AdKbuqEtM=; b=RTAz2Nn5l4F8la6UHdUIiEDM7L7ouAViWuJryI9qQNLnGYl78DvskTT1TfFOLO+Cjn WiW/cpH8B0Uba0k+42TamDjJVUMJfBhsdJOFzCV6V4zBsdcBoqLik2d3qOJuwJeS55q4 FeKnbg4VpS1GiwGgSnprXhIaNlWCxSwwuoiZo= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:content-transfer-encoding:message-id:content-type:to :from:subject:date:x-mailer; b=Wr9mXbPKfh9RhJ0N6bM7hRwk4GCza1JMepotl/qo9fIhbioqWjJTw0QxOYFmvRN1I7 u9vnP9JCRcC4NzyjLXvfIJa2u+VlcZp2D7ixjw4bQeMVI1zFarP+74sRsMWS1vcOXz1Y ogGM34uSftyMWVkdo0YZ21yJzpY0fdmaDi44U= Hash: ----- It just happens that if you try this in the Terminal: openssl dgst sha256 thepackage.ref you don't get the same hash result. Certificate: ------------ Bug: ---- _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... When you create a referenced package (http, x-disc) in a distribution, a hash-sha256 key-value couple is added to the Distribution script for the related pkg-ref. Considering this is not documented in the official documentation, would there be a farmer at Cupertino who could describe where this hash-sha256 value is coming from? If you use a Certificate for a distribution, the certificate is used to sign both the distribution and the packages that are related to the distribution but not embedded in the distribution. Let's say I import a signed package inside a signed distribution project and I don't embed it into the distribution, does it make sense to replace the signature for the package with the one of the distribution or to keep the original one? There's a bug in PackageMaker (Snow Leopard). If you remove a choice from the list, import a package and build, the final name of the package is not correct. You can save the project, quit and try again, same result. This email sent to site_archiver@lists.apple.com