site_archiver@lists.apple.com Delivered-To: Installer-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mikesolin.com; s=google; h=from:mime-version:subject:date:references:to:in-reply-to:message-id; bh=CfAyI8kjWzyeGGelkMlRuHt0ebtxp/egVRSaOp/Ix4s=; b=bM1Xrvb0M1tLUR5okart+FMdfw7xOpTEZAyO60dmmE/NNfWWZWeInvNCbxrPBeZp4x UxJHKLIcLmWoTWjU2U7Zw21KGMZ3AJIpLv+CdcF+IxlQ/4vKcCcyKUmH3g7QhRMl0wLI lny8SJ6+c/eFIUHZLlkHpY0zCn+a6i+sDyWho= Try reaching out to Apple Developer Support to see if they can help. Mike -- mike@mikesolin.com / @flammable https://mikesolin.com

On Aug 10, 2017, at 4:02 PM, Brian Kendall <guygizmo@gmail.com> wrote:

Prema et al,

...

On Aug 4, 2017, at 2:32 AM, Prema Kumar <Prema.Kumar@efi.com <mailto:Prema.Kumar@efi.com>> wrote:

Hi, According to the following link new installations will not work.

https://developer.apple.com/support/certificates <https://developer.apple.com/support/certificates>/ Read the section "Developer ID Installer Certificate (Mac applications)”

I've read the text, and the reason for my earlier email to this list (and I believe for Paul as well) is that even though this page reads:

• Developer ID Installer Certificate (Mac applications) If your certificate expires, users can no longer launch installer packages for your Mac applications that were signed with this certificate. Previously installed apps will continue to run however new installations will not be possible until you have re-signed your installer package with a valid Developer ID Installer certificate. If your certificate has been revoked, users will no longer be able to install applications that have been signed with this certificate.

... that doesn't actually appear to be true! As I said in my previous email, I set the clock forward past my certificate's expiration date on both a macOS 10.11 and 10.12 system and was still able to run my installer. In 10.11 it even said the certificate was expired if I clicked the lock icon in Installer.app but otherwise I could run the installer.

So clearly we have a situation where my results do not line up with Apple's documentation. So I'm wondering, what is the explanation for this? Do I actually need to resign all of my old installers, or will users continue to be able to use them?

Regards, - Brian

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/mike%40mikesolin.com

This email sent to mike@mikesolin.com

_______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com