airbnb / lottie-ios

An iOS library to natively render After Effects vector animations
http://airbnb.io/lottie/
Apache License 2.0
25.76k stars 3.75k forks source link

The signature of “Lottie.xcframework” cannot be validated and may have been compromised. #2334

Closed jesus-mg-ios closed 7 months ago

jesus-mg-ios commented 7 months ago

Which Version of Lottie are you using?

Lottie 4.4.1 https://github.com/airbnb/lottie-ios/releases/download/4.4.1/Lottie-Xcode-15.2.xcframework.zip

Xcode 15.3

Expected Behavior

No error

Actual Behavior

image

Animation JSON

calda commented 7 months ago

I can't reproduce this issue testing the linked Lottie-Xcode-15.2.xcframework.zip file in a sample project using Xcode 15.3. Could you share a sample project that demonstrates this issue?

jesus-mg-ios commented 7 months ago

The project was forced to not trust self signed and ends on this "The signature of “Lottie.xcframework” cannot be validated and may have been compromised."

Maybe we can do something with it:

image
calda commented 7 months ago

We use a self-signed certificate as explained here. That fingerprint is correct and authentic.

The project was forced to not trust self signed

How are you configuring this, and why reject self-signed libraries?

calda commented 7 months ago

Converting this to a discussion given this is configuration-related