search

sassoftware / relic

Relic is a service and a tool for adding digital signatures to operating system packages for Linux and Windows
Apache License 2.0
151 stars 41 forks source link

Fix xar signing with timestamp enabled #20

Closed chrisroberts closed 1 year ago

chrisroberts commented 1 year ago

When signing is configured with timestamp enabled it will fail to write the signature due to inadequate space. Adjusting the size provides enough space for it to be written successfully. I'm unsure if a different value makes more sense for reasons I didn't find but this adjustment does work.

When attempting to sign on master an error is encountered:

➜ ./relic sign -c ./config.yml --file ./test.pkg --output ./test.signed.pkg --key macinstall
ERROR: signature overflows reserved space: have 6959 bytes, need 7649

When signing with this adjustment it succeeds: 

➜ ./relic sign -c ./config.yml --file ./test.pkg --output ./test.signed.pkg --key macinstall
Signed ./test.pkg