autopkg / andrewvalentine-recipes

6 stars 19 forks source link

CodeSignatureVerifier Error with PocketCasts.download.recipe #53

Open christopherthart opened 1 year ago

christopherthart commented 1 year ago

I'm seeing the following issue with the PocketCasts.download.recipe.

The following recipes failed: PocketCasts.munki Error in local.munki.PocketCasts: Processor: CodeSignatureVerifier: Error: Code signature verification failed. Note that all verifications can be disabled by setting the variable DISABLE_CODE_SIGNATURE_VERIFICATION to a non-empty value.

The current CodeSignatureVerifier in the download recipe is stated as:

<string>anchor apple generic and identifier "au.com.shiftyjelly.PocketCasts" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = U92XK6M46K)</string>

When looking at the app bundle it returns the following:

anchor apple generic and identifier "au.com.shiftyjelly.PocketCastsMac" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = PZYM8XX95Q)

So, it looks like "au.com.shiftyjelly.PocketCastsMac" and PZYM8XX95Q are the new values.