Re: Verify productsign on flat packages
On Fri, Oct 26, 2012 at 7:15 AM, Khushneet Inder Singh <ksingh@quark.com> wrote:
Hi,
Thanks for reply, but the "--check-signature" option in pkgutil was introduced later in 10.7(Lion). So for me the problem remains the same , I am still unable to verify signature on snow leopard and leopard.
Considering that a flat package/distribution is a xar archive, a solution could be to: 1. extract the certificates from the archive either using --dump-toc and some XML parsing or using a fork of the xar project: http://mackyle.github.com/xar/howtosign.html 2. use 'openssl x509' to retrieve the information you need. _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com
participants (1)
-
Stephane Sudre