site_archiver@lists.apple.com Delivered-To: Installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:date:references:to:in-reply-to:message-id; bh=I4EBFUi/YoFUynsI2PFP2j1f+IoVUDYg88jQ/SEzUwU=; b=abaDnnsf53IIPtQNY3l3HgImn0Np4DOOH/do7PBQYCTRJpedMTAmgYEBTvJCRPK0Zc fIZ+LSpq0ZV5KOcgO17xzZSeBhEKJHHH+LjHwp/doufnap4NCaqcrYnqZ4nyhUsjPI2f EPqwaLfPyH1PpUi8bH2aHR1afwnCP4Lii/ujbQEKpcyz45XGICvEAOvCvuGz4odzJtzW 1QwBPSytHt5jQJeZWeUY1Bm+qRT1tA39kjVYiHr+/pIi0WCc1pcgtK5lB339V4fiCfhs cwdZzvPLbvfmjnePMd2kuuGXEovMNMdxxLslYjhPJZJ+CZTYfOPEBIHDEyN8ruYFCY6D 8ArQ== Prema et al,

On Aug 4, 2017, at 2:32 AM, Prema Kumar <Prema.Kumar@efi.com> wrote:

Hi, According to the following link new installations will not work.

https://developer.apple.com/support/certificates <https://developer.apple.com/support/certificates>/ Read the section "Developer ID Installer Certificate (Mac applications)”

I've read the text, and the reason for my earlier email to this list (and I believe for Paul as well) is that even though this page reads: • Developer ID Installer Certificate (Mac applications) If your certificate expires, users can no longer launch installer packages for your Mac applications that were signed with this certificate. Previously installed apps will continue to run however new installations will not be possible until you have re-signed your installer package with a valid Developer ID Installer certificate. If your certificate has been revoked, users will no longer be able to install applications that have been signed with this certificate. ... that doesn't actually appear to be true! As I said in my previous email, I set the clock forward past my certificate's expiration date on both a macOS 10.11 and 10.12 system and was still able to run my installer. In 10.11 it even said the certificate was expired if I clicked the lock icon in Installer.app but otherwise I could run the installer. So clearly we have a situation where my results do not line up with Apple's documentation. So I'm wondering, what is the explanation for this? Do I actually need to resign all of my old installers, or will users continue to be able to use them? Regards, - Brian _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com