search

reddcoin-project / reddcoin-3.10

Reddcoin: the digital social currency
http://www.reddcoin.com
MIT License
287 stars 114 forks source link

Mac binary not signed with valid key #92

Closed pingofchaos closed 4 years ago

pingofchaos commented 7 years ago

Says "unidentified source"

reddink commented 7 years ago

How are you checking? codesign -dv /path_to_app/reddcoin-2.0.0.0-osx-signed.dmg or codesign -dv --verbose=4 /path_to_app/reddcoin-2.0.0.0-osx-signed.dmg for more details

Also since you are not downloading this form the apple store your security should allow apps from Mac App Store & identified developers

pingofchaos commented 7 years ago

It would only launch if security is set to all sources allowed. Says its from an unidentified source.

On 02/09/2016, at 03:23, John Nash notifications@github.com wrote:

How are you checking? codesign -dv /path_to_app/reddcoin-2.0.0.0-osx-signed.dmg or codesign -dv --verbose=4 /path_to_app/reddcoin-2.0.0.0-osx-signed.dmg for more details

Also since you are not downloading this form the apple store your security should allow apps from Mac App Store & identified developers

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/reddcoin-project/reddcoin/issues/92#issuecomment-244259088, or mute the thread https://github.com/notifications/unsubscribe-auth/ATi3xSLr31JBkB_E0BKRbzJUcfv50vq4ks5ql3p9gaJpZM4Jy4Pg.

reddink commented 7 years ago

If you run the above command in a terminal what is the response output?

pingofchaos commented 7 years ago

$ codesign -dv --verbose=4 /Applications/Reddcoin-Qt.app /Applications/Reddcoin-Qt.app: code object is not signed at all

On 02/09/2016, at 04:55, John Nash notifications@github.com wrote:

If you run the above command in a terminal what is the response output?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

reddink commented 7 years ago

and if you run it on the dmg (only the dmg is signed currently)

pingofchaos commented 7 years ago

Identifier=reddcoin-2.0.0.0-osx Format=disk image CodeDirectory v=20200 size=308 flags=0x0(none) hashes=1+6 location=embedded Hash type=sha256 size=32 CandidateCDHash sha256=41106cc6c950b6235c4f1c3d30fa60d514fd080f Hash choices=sha256 CDHash=41106cc6c950b6235c4f1c3d30fa60d514fd080f Signature size=8856 Authority=Developer ID Application: John Nash (Q6ZYKJ3NR2) Authority=Developer ID Certification Authority Authority=Apple Root CA Timestamp=06/08/2016 16:00:44 Info.plist=not bound TeamIdentifier=Q6ZYKJ3NR2 Sealed Resources=none Internal requirements count=1 size=180

But that is pretty pointless, why don’t you sign the executable?

On 02/09/2016, at 05:01, John Nash notifications@github.com wrote:

and if you run it on the dmg (only the dmg is signed currently)

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

reddink commented 7 years ago

In my test environment, the install process works without raising the warning message. There are a number of OSx installs already, with yours being the first reported issue on install.. Will revise the signing process for OSx deployment.

FlorianWendelborn commented 6 years ago

Same issue here, the .app inside the .dmg from the official website is from an unidentified developer.

TechAdeptRDD commented 4 years ago

As of v3.10.0 (https://www.reddcoin.com/2020/06/13/reddcoin-core-3-10-0/) Mac binary is now digitally signed.