Signing succeeds, but when I verify with relic I get this:
> relic verify ./<Mach-O binary>
./<Mach-O binary> ERROR: validating timestamp: x509: “Timestamp Signer NWK1” certificate is not permitted for this usage
ERROR: 1 or more files did not validate
Verifying with codesign also fails:
> codesign -vvv ./macnotary
./<Mach-O binary>: CSSMERR_TP_NOT_TRUSTED
In architecture: x86_64
The relic version I have used:
relic version v7.6.2 (h1:rS44Lbv9G9eXsukknS4mSjIAuuX+lMq/FnStgmZlUv4=)
The host I ran this is: 14.2.1 (23C71) - MacOS Sonoma
Is this a bug, or there is a problem in the process I followed?
The signing configuration I used is this:
And this is the command:
Signing succeeds, but when I verify with relic I get this:
Verifying with
codesign
also fails:The relic version I have used:
The host I ran this is:
14.2.1 (23C71)
- MacOS SonomaIs this a bug, or there is a problem in the process I followed?