Closed paul-cossey closed 2 years ago
Hi,
This this PR updates the CodeSignatureVerifier
Output from a -vvv run:
autopkg run -vvv /Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/PyCharm-CE.download.recipe Processing /Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/PyCharm-CE.download.recipe... WARNING: /Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/PyCharm-CE.download.recipe is missing trust info and FAIL_RECIPES_WITHOUT_TRUST_INFO is not set. Proceeding... {'APP_NAME': 'PyCharm CE', 'AUTOPKG_VERSION': '2.3.1', 'CSV_REQ': 'identifier "com.jetbrains.pycharm.ce" and anchor apple generic ' 'and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ ' 'and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists ' '*/ and certificate leaf[subject.OU] = "2ZEFAR8TH3"', 'GIT_PATH': '/Applications/Xcode.app/Contents/Developer/usr/bin/git', 'MUNKI_REPO': '/Users/Shared/munki_repo', 'NAME': 'PyCharm Community Edition', 'PARENT_RECIPES': ['/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/JetBrains.download.recipe'], 'PROD_CODE': 'PCC', 'RECIPE_CACHE_DIR': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce', 'RECIPE_DIR': '/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains', 'RECIPE_OVERRIDE_DIRS': ['~/Library/AutoPkg/RecipeOverrides'], 'RECIPE_PATH': '/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/PyCharm-CE.download.recipe', 'RECIPE_REPOS': {}, 'RECIPE_REPO_DIR': '/Users/Shared/munki_repo', 'RECIPE_SEARCH_DIRS': ['.', '~/Library/AutoPkg/Recipes', '/Library/AutoPkg/Recipes', '/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains'], 'verbose': 3} URLTextSearcher {'Input': {'re_pattern': '"mac":{"link":"(https://download.jetbrains.com/.*?.dmg)"', 'request_headers': {'user-agent': 'Mozilla/5.0 (Macintosh; Intel ' 'Mac OS X 10.11; rv:46.0) ' 'Gecko/20100101 Firefox/46.0'}, 'url': 'https://data.services.jetbrains.com/products/releases?code=PCC&latest=true&type=release'}} URLTextSearcher: No value supplied for result_output_var_name, setting default value of: match URLTextSearcher: Found matching text (match): https://download.jetbrains.com/python/pycharm-community-2021.3.3.dmg {'Output': {'match': 'https://download.jetbrains.com/python/pycharm-community-2021.3.3.dmg'}} URLDownloader {'Input': {'request_headers': {'user-agent': 'Mozilla/5.0 (Macintosh; Intel ' 'Mac OS X 10.11; rv:46.0) ' 'Gecko/20100101 Firefox/46.0'}, 'url': 'https://download.jetbrains.com/python/pycharm-community-2021.3.3.dmg'}} URLDownloader: No value supplied for prefetch_filename, setting default value of: False URLDownloader: No value supplied for CHECK_FILESIZE_ONLY, setting default value of: False URLDownloader: Storing new Last-Modified header: Thu, 17 Mar 2022 11:51:53 GMT URLDownloader: Storing new ETag header: "6edf3160545a42f4da9c50c21d64557a-61" URLDownloader: Downloaded /Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg {'Output': {'download_changed': True, 'etag': '"6edf3160545a42f4da9c50c21d64557a-61"', 'last_modified': 'Thu, 17 Mar 2022 11:51:53 GMT', 'pathname': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg', 'url_downloader_summary_result': {'data': {'download_path': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg'}, 'summary_text': 'The following ' 'new items were ' 'downloaded:'}}} AppDmgVersioner {'Input': {'dmg_path': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg'}} AppDmgVersioner: Mounted disk image /Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg AppDmgVersioner: BundleID: com.jetbrains.pycharm.ce AppDmgVersioner: Version: 2021.3.3 {'Output': {'app_name': 'PyCharm CE.app', 'bundleid': 'com.jetbrains.pycharm.ce', 'version': '2021.3.3'}} CodeSignatureVerifier {'Input': {'input_path': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg/PyCharm ' 'CE.app', 'requirement': 'identifier "com.jetbrains.pycharm.ce" and anchor ' 'apple generic and certificate ' '1[field.1.2.840.113635.100.6.2.6] /* exists */ and ' 'certificate leaf[field.1.2.840.113635.100.6.1.13] ' '/* exists */ and certificate leaf[subject.OU] = ' '"2ZEFAR8TH3"'}} CodeSignatureVerifier: Mounted disk image /Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg CodeSignatureVerifier: Verifying code signature... CodeSignatureVerifier: Deep verification enabled... CodeSignatureVerifier: Strict verification not defined. Using codesign defaults... CodeSignatureVerifier: /private/tmp/dmg.UhaLQM/PyCharm CE.app: valid on disk CodeSignatureVerifier: /private/tmp/dmg.UhaLQM/PyCharm CE.app: satisfies its Designated Requirement CodeSignatureVerifier: /private/tmp/dmg.UhaLQM/PyCharm CE.app: explicit requirement satisfied CodeSignatureVerifier: Signature is valid {'Output': {}} EndOfCheckPhase {'Input': {}} {'Output': {}} {'APP_NAME': 'PyCharm CE', 'AUTOPKG_VERSION': '2.3.1', 'CHECK_FILESIZE_ONLY': False, 'CSV_REQ': 'identifier "com.jetbrains.pycharm.ce" and anchor apple generic ' 'and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ ' 'and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists ' '*/ and certificate leaf[subject.OU] = "2ZEFAR8TH3"', 'GIT_PATH': '/Applications/Xcode.app/Contents/Developer/usr/bin/git', 'MUNKI_REPO': '/Users/Shared/munki_repo', 'NAME': 'PyCharm Community Edition', 'PARENT_RECIPES': ['/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/JetBrains.download.recipe'], 'PROD_CODE': 'PCC', 'RECIPE_CACHE_DIR': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce', 'RECIPE_DIR': '/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains', 'RECIPE_OVERRIDE_DIRS': ['~/Library/AutoPkg/RecipeOverrides'], 'RECIPE_PATH': '/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains/PyCharm-CE.download.recipe', 'RECIPE_REPOS': {}, 'RECIPE_REPO_DIR': '/Users/Shared/munki_repo', 'RECIPE_SEARCH_DIRS': ['.', '~/Library/AutoPkg/Recipes', '/Library/AutoPkg/Recipes', '/Users/paul/Documents/GitHub/bnpl-recipes/JetBrains'], 'app_name': 'PyCharm CE.app', 'bundleid': 'com.jetbrains.pycharm.ce', 'dmg_path': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg', 'download_changed': True, 'etag': '"6edf3160545a42f4da9c50c21d64557a-61"', 'input_path': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg/PyCharm ' 'CE.app', 'last_modified': 'Thu, 17 Mar 2022 11:51:53 GMT', 'match': 'https://download.jetbrains.com/python/pycharm-community-2021.3.3.dmg', 'pathname': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg', 'prefetch_filename': False, 're_pattern': '"mac":{"link":"(https://download.jetbrains.com/.*?.dmg)"', 'request_headers': {'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X ' '10.11; rv:46.0) Gecko/20100101 ' 'Firefox/46.0'}, 'requirement': 'identifier "com.jetbrains.pycharm.ce" and anchor apple ' 'generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* ' 'exists */ and certificate ' 'leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and ' 'certificate leaf[subject.OU] = "2ZEFAR8TH3"', 'result_output_var_name': 'match', 'url': 'https://download.jetbrains.com/python/pycharm-community-2021.3.3.dmg', 'url_downloader_summary_result': {'data': {'download_path': '/Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg'}, 'summary_text': 'The following new items ' 'were downloaded:'}, 'verbose': 3, 'version': '2021.3.3'} Receipt written to /Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/receipts/PyCharm-CE.download-receipt-20220321-121815.plist The following new items were downloaded: Download Path ------------- /Users/paul/Library/AutoPkg/Cache/com.github.bnpl.autopkg.download.pycharmce/downloads/pycharm-community-2021.3.3.dmg
Hi,
This this PR updates the CodeSignatureVerifier
Output from a -vvv run: