balena-io / etcher

Flash OS images to SD cards & USB drives, safely and easily.
https://etcher.io/
Apache License 2.0
29.96k stars 2.12k forks source link

Can't open etcher on latest MacOS #4349

Open aethernet opened 3 weeks ago

aethernet commented 3 weeks ago

Hello,

With the new restriction in the latest Macos, it's possible your existing version of Etcher won't run anymore. The latest version available on GitHub (and https://etcher.balena.io) is signed with a new certificate that should work fine.

fabiocorneti commented 1 week ago

Hi there, I opened Etcher 1.29.21, installed with brew some time ago on Sequoia 15.1 and it was binned automatically by gatekeeper as "malware".

To double check it was not some malicious release, I downloaded manually 1.19.21 from the GitHub releases page, checked the SHA, and indeed it is still flagged as "malware" as the certificate was revoked:

image
spctl --assess --verbose=4 ~/Downloads/balenaEtcher.app
balenaEtcher.app: CSSMERR_TP_CERT_REVOKED

For peace of mind, can you confirm that the old certificate has been explicitly revoked upon issuing the new one?

cgruver commented 1 week ago

Same thing happened to me with an older release. Version 1.19.25 appears to work fine on the new MacOS release.

moreati commented 1 week ago

Quoting the error messages, to help people searching the Internet find this

The application “balenaEtcher.app” can’t be opened. Malware Blocked and Moved to Bin “balenaEtcher.app” was not opened because it contains malware. This action did not harm your Mac."

This was balenaEtcher 1.18.11 on macOS 15.1.

jstefanop commented 6 days ago

You guys still have not fixed the .img.xz bug on Mac...fails to properly flash unless the image is extracted first

aethernet commented 2 days ago

For peace of mind, can you confirm that the old certificate has been explicitly revoked upon issuing the new one?

Yes it's been revoked.

The Macos messaging is unfortunate as it's not malware, but a certificate revocation.