Re-Investigate macOS signing/notarization

trezor / trezord-go

:smiling_imp: Trezor Communication Daemon (written in Go)

GNU Lesser General Public License v3.0

244 stars 146 forks source link

Closed prusnak closed 2 years ago

prusnak commented 3 years ago

We have some reports the new 2.0.30 is not properly signed, although we used the method we've always used using the fresh keys issued by Apple.

Let's investigate whether these are valid. And/ or whether we should use notarization instead of signing locally.

bosomt commented 3 years ago

@prusnak 2.0.30 is not signed in Windows version too. 2.0.27 was signed, do you want me to send separate issue ?

prusnak commented 3 years ago

I can see the 2.0.30 is signed for Windows, but if you really think it's not, please file the new issue

bosomt commented 3 years ago

@prusnak i see it's signed but there is some kind of error, i will send it soon

kklash commented 3 years ago

This is what a user sees when they try to install trezor-bridge on Big Sur:

Haven't tested other Mac OS versions.

igor-hnizdo commented 2 years ago