Re: Code Signing for Mac application
Re: Code Signing for Mac application
- Subject: Re: Code Signing for Mac application
- From: Graham Lee <email@hidden>
- Date: Tue, 16 Feb 2010 19:53:45 +0000
Issue 1 is already solved. Specify your cert in packagemaker and it
builds a signed package. Installer includes UI for verifying the
identity. Questions could be taken up on installer-dev.
Issue 2 is already solved. I don't remember how, but it's possible to
change the extent to which the signing seal prevents modification. I
think it's done through plist settings but don't remember. Perhaps
perry on the apple-cdsa list will know.
Graham Lee
http://thaesofereode.info
On 16 Feb 2010, at 19:34, "Paul Sanders" <email@hidden>
wrote:
PS: Don't get me wrong. I *want* to sign my code. I spent good
money on a code signing certificate and I was hoping to be able
to use it. But the problems greatly outweigh the benefits so I
have given up on the idea. What would make me reconsider is:
1. A message that says 'this app is signed by xyz' when the
user launches my installer.
2. When a file is added to a sealed Resources folder, it does
not break the code signature.
Of course (1) requires (in my case) a change to Package Maker
and it would also be necessary, really, to be able to sign a DMG
so that, when Safari downloads it, it can tell the user who
created it.
I could chase around the mailing lists fighting this cause but,
frankly, I do not have the motivation. The problem cuts across
a number of areas and needs to be properly reviewed inside
Apple. But by all means pass this message on to whoever might
find it useful, Chris.
Paul Sanders.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden