search

autopkg / apizz-recipes

MIT License
14 stars 23 forks source link

TeamViewer have changed Developer ID Installer #58

Closed andrewvalentine closed 1 year ago

andrewvalentine commented 2 years ago

Updated download recipe to reflect this

apizz commented 2 years ago

@andrewvalentine can you share verbose output from recipe run pls?

andrewvalentine commented 2 years ago

It seems that this change only applies to v.15 of the .pkg.

Here is what I have done so far.

Here is the output of that:

> autopkg run -vv TeamViewerHostCustom.download
Processing TeamViewerHostCustom.download...
URLDownloader
{'Input': {'filename': 'TeamViewerHostCustom-$MYORGID.pkg',
           'url': 'https://dl.tvcdn.de//download/version_15x/CustomDesign/Install%20TeamViewerHost-$MYORGID.pkg'}}
URLDownloader: No value supplied for prefetch_filename, setting default value of: False
URLDownloader: No value supplied for CHECK_FILESIZE_ONLY, setting default value of: False
URLDownloader: Storing new Last-Modified header: Tue, 26 Jul 2022 05:53:16 GMT
URLDownloader: Storing new ETag header: "62df814c-3194ffd"
URLDownloader: Downloaded /Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg
{'Output': {'download_changed': True,
            'etag': '"62df814c-3194ffd"',
            'last_modified': 'Tue, 26 Jul 2022 05:53:16 GMT',
            'pathname': '/Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg',
            'url_downloader_summary_result': {'data': {'download_path': '/Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg'},
                                              'summary_text': 'The following '
                                                              'new items were '
                                                              'downloaded:'}}}
EndOfCheckPhase
{'Input': {}}
{'Output': {}}
CodeSignatureVerifier
{'Input': {'expected_authority_names': ['Developer ID Installer: TeamViewer '
                                        'GmbH (H7UGFBUGV6)',
                                        'Developer ID Certification Authority',
                                        'Apple Root CA'],
           'input_path': '/Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg'}}
CodeSignatureVerifier: Verifying installer package signature...
CodeSignatureVerifier: Package "TeamViewerHostCustom-$MYORGID.pkg":
CodeSignatureVerifier:    Status: signed by a developer certificate issued by Apple for distribution
CodeSignatureVerifier:    Signed with a trusted timestamp on: 2022-07-13 08:34:23 +0000
CodeSignatureVerifier:    Certificate Chain:
CodeSignatureVerifier:     1. Developer ID Installer: TeamViewer Germany GmbH (H7UGFBUGV6)
CodeSignatureVerifier:        Expires: 2027-02-09 12:21:10 +0000
CodeSignatureVerifier:        SHA256 Fingerprint:
CodeSignatureVerifier:            40 B7 9F BC F7 67 55 CC F9 B2 DA A7 1E EA B9 22 13 DF E5 E3 34 74
CodeSignatureVerifier:            36 8C B0 13 CF 14 C5 FA F2 A2
CodeSignatureVerifier:        ------------------------------------------------------------------------
CodeSignatureVerifier:     2. Developer ID Certification Authority
CodeSignatureVerifier:        Expires: 2031-09-17 00:00:00 +0000
CodeSignatureVerifier:        SHA256 Fingerprint:
CodeSignatureVerifier:            F1 6C D3 C5 4C 7F 83 CE A4 BF 1A 3E 6A 08 19 C8 AA A8 E4 A1 52 8F
CodeSignatureVerifier:            D1 44 71 5F 35 06 43 D2 DF 3A
CodeSignatureVerifier:        ------------------------------------------------------------------------
CodeSignatureVerifier:     3. Apple Root CA
CodeSignatureVerifier:        Expires: 2035-02-09 21:40:36 +0000
CodeSignatureVerifier:        SHA256 Fingerprint:
CodeSignatureVerifier:            B0 B1 73 0E CB C7 FF 45 05 14 2C 49 F1 29 5E 6E DA 6B CA ED 7E 2C
CodeSignatureVerifier:            68 C5 BE 91 B5 A1 10 01 F0 24
CodeSignatureVerifier:
CodeSignatureVerifier: Signature is valid
CodeSignatureVerifier: Mismatch in authority names
CodeSignatureVerifier: Expected: Developer ID Installer: TeamViewer GmbH (H7UGFBUGV6) -> Developer ID Certification Authority -> Apple Root CA
CodeSignatureVerifier: Found:    Developer ID Installer: TeamViewer Germany GmbH (H7UGFBUGV6) -> Developer ID Certification Authority -> Apple Root CA
Mismatch in authority names. Note that all verification can be disabled by setting the variable DISABLE_CODE_SIGNATURE_VERIFICATION to a non-empty value.
Failed.
Receipt written to /Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/receipts/TeamViewerHostCustom-receipt-20220728-060825.plist

The following recipes failed:
    TeamViewerHostCustom.download
        Error in local.download.TeamViewerHostCustom: Processor: CodeSignatureVerifier: Error: Mismatch in authority names. Note that all verification can be disabled by setting the variable DISABLE_CODE_SIGNATURE_VERIFICATION to a non-empty value.

The following new items were downloaded:
    Download Path
    -------------
    /Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg

I then changed TEAMVIEWER_VERSION back to 12:

> autopkg run -vv TeamViewerHostCustom.download
Processing TeamViewerHostCustom.download...
URLDownloader
{'Input': {'filename': 'TeamViewerHostCustom-$MYORGID.pkg',
           'url': 'https://dl.tvcdn.de//download/version_12x/CustomDesign/Install%20TeamViewerHost-$MYORGID.pkg'}}
URLDownloader: No value supplied for prefetch_filename, setting default value of: False
URLDownloader: No value supplied for CHECK_FILESIZE_ONLY, setting default value of: False
URLDownloader: Storing new Last-Modified header: Tue, 27 Apr 2021 08:23:33 GMT
URLDownloader: Storing new ETag header: "6087ca05-1f02cf8"
URLDownloader: Downloaded /Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg
{'Output': {'download_changed': True,
            'etag': '"6087ca05-1f02cf8"',
            'last_modified': 'Tue, 27 Apr 2021 08:23:33 GMT',
            'pathname': '/Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg',
            'url_downloader_summary_result': {'data': {'download_path': '/Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg'},
                                              'summary_text': 'The following '
                                                              'new items were '
                                                              'downloaded:'}}}
EndOfCheckPhase
{'Input': {}}
{'Output': {}}
CodeSignatureVerifier
{'Input': {'expected_authority_names': ['Developer ID Installer: TeamViewer '
                                        'GmbH (H7UGFBUGV6)',
                                        'Developer ID Certification Authority',
                                        'Apple Root CA'],
           'input_path': '/Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg'}}
CodeSignatureVerifier: Verifying installer package signature...
CodeSignatureVerifier: Package "TeamViewerHostCustom-$MYORGID.pkg":
CodeSignatureVerifier:    Status: signed by a developer certificate issued by Apple for distribution
CodeSignatureVerifier:    Signed with a trusted timestamp on: 2021-04-15 13:06:24 +0000
CodeSignatureVerifier:    Certificate Chain:
CodeSignatureVerifier:     1. Developer ID Installer: TeamViewer GmbH (H7UGFBUGV6)
CodeSignatureVerifier:        Expires: 2023-10-10 07:10:09 +0000
CodeSignatureVerifier:        SHA256 Fingerprint:
CodeSignatureVerifier:            4A 8D BB E3 46 A9 BA 57 EE F5 E4 FA 24 85 B3 49 D4 53 C6 E3 7F 3A
CodeSignatureVerifier:            18 09 C6 60 55 90 F5 7F 29 E5
CodeSignatureVerifier:        ------------------------------------------------------------------------
CodeSignatureVerifier:     2. Developer ID Certification Authority
CodeSignatureVerifier:        Expires: 2027-02-01 22:12:15 +0000
CodeSignatureVerifier:        SHA256 Fingerprint:
CodeSignatureVerifier:            7A FC 9D 01 A6 2F 03 A2 DE 96 37 93 6D 4A FE 68 09 0D 2D E1 8D 03
CodeSignatureVerifier:            F2 9C 88 CF B0 B1 BA 63 58 7F
CodeSignatureVerifier:        ------------------------------------------------------------------------
CodeSignatureVerifier:     3. Apple Root CA
CodeSignatureVerifier:        Expires: 2035-02-09 21:40:36 +0000
CodeSignatureVerifier:        SHA256 Fingerprint:
CodeSignatureVerifier:            B0 B1 73 0E CB C7 FF 45 05 14 2C 49 F1 29 5E 6E DA 6B CA ED 7E 2C
CodeSignatureVerifier:            68 C5 BE 91 B5 A1 10 01 F0 24
CodeSignatureVerifier:
CodeSignatureVerifier: Signature is valid
CodeSignatureVerifier: Authority name chain is valid
{'Output': {}}
Receipt written to /Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/receipts/TeamViewerHostCustom-receipt-20220728-060907.plist

The following new items were downloaded:
    Download Path
    -------------
    /Users/$MYUSER/Library/AutoPkg/Cache/local.download.TeamViewerHostCustom/downloads/TeamViewerHostCustom-$MYORGID.pkg

So it seems the new ID only applies to v.15. Would you be willing to author recipe for TeamViewerHostCustom 15? If not, I'm happy to write one myself incorporating the new signing ID.

apizz commented 1 year ago

I opted to keep the old recipes as they are designed for v14 and lower. Created new recipes for v15 and later with updated code signature.

Let me know if the new recipes don't work for you.