Re: Code signing checking

2023-01-29 Thread Stephane Sudre via Cocoa-dev
for doing the following activities related to code > signing? > - Check that the signature on the running codesigned executable is from the > same company as the signature on a bundle? > OR > - Get the company from the codesigned running executable and > - Get the company from a sig

Re: Code signing checking

2023-01-06 Thread James Walker via Cocoa-dev
On 1/6/23 12:28 PM, Aandi Inston via Cocoa-dev wrote: Is there any API for doing the following activities related to code signing? - Check that the signature on the running codesigned executable is from the same company as the signature on a bundle? OR - Get the company from the codesigned

Code signing checking

2023-01-06 Thread Aandi Inston via Cocoa-dev
Is there any API for doing the following activities related to code signing? - Check that the signature on the running codesigned executable is from the same company as the signature on a bundle? OR - Get the company from the codesigned running executable and - Get the company from a signature on

Re: Code signing problem in one project...

2020-04-26 Thread Markus Spoettl via Cocoa-dev
On 4/26/20 11:25 PM, Steve Mykytyn via Cocoa-dev wrote: I'm automatically managing code signing on all my Xcode projects. Just today, one started refusing to validate / distribute, claiming it was missing a private key. All the other projects continue to build just fine. Tried resta

Code signing problem in one project...

2020-04-26 Thread Steve Mykytyn via Cocoa-dev
I'm automatically managing code signing on all my Xcode projects. Just today, one started refusing to validate / distribute, claiming it was missing a private key. All the other projects continue to build just fine. Tried restarting Xcode, turned automatic signing on and off, deleted de

Re: code signing fails to verify on 10.10?

2019-05-29 Thread David M. Cotter via Cocoa-dev
well, the solution was to just re-build the offending library with 10.9 as the target and all is well > On May 20, 2019, at 9:38 AM, David M. Cotter wrote: > > i saw this article: > https://stackoverflow.com/questions/41865537/how-does-apples-codesign-utility-decide-which-sha-algorithms-to-s

Re: code signing fails to verify on 10.10?

2019-05-20 Thread David M. Cotter
i saw this article: https://stackoverflow.com/questions/41865537/how-does-apples-codesign-utility-decide-which-sha-algorithms-to-sign-a-shared which seemed to be related,

Re: code signing fails to verify on 10.10?

2019-05-20 Thread Alex Zavatone
Oddly enough, I was getting invalid bundle for all our included iOS frameworks when trying to deliver last week using Xcode 10.2.1. Last Monday, it worked as expected. Later on in the week, the errors appeared. We didn’t change anything in the app structure. > On May 20, 2019, at 1:20 AM, M

Re: code signing fails to verify on 10.10?

2019-05-19 Thread Markus Spoettl
On 5/20/19 5:38 AM, David M. Cotter wrote: my app works fine on 10.12 and above but on 10.10.5, i get this: Application Specific Information: dyld: launch, loading dependent libraries Dyld Error Message: Library not loaded: @loader_path/../Frameworks/libboost_thread.dylib Referenced from:

code signing fails to verify on 10.10?

2019-05-19 Thread David M. Cotter
I’m developing on 10.14.4 using Xcode 9.4.1 signing via command line (not via xcode) my app works fine on 10.12 and above but on 10.10.5, i get this: > Application Specific Information: > dyld: launch, loading dependent libraries > Dyld Error Message: > Library not loaded: @loader_path/../Frame

Re: bare bones app crashing, is it a code signing issue?

2017-10-12 Thread Saagar Jha
Saagar Jha > On Oct 12, 2017, at 20:55, Navneet Kumar wrote: > > Hi, > I have MacOS High Sierra and Xcode 9. > When I start a new project without any development team, choosing Obj-c, and > adding nothing to the code, the app starts and shows the window. > > Now I added my Apple ID in Xcode a

bare bones app crashing, is it a code signing issue?

2017-10-12 Thread Navneet Kumar
Hi, I have MacOS High Sierra and Xcode 9. When I start a new project without any development team, choosing Obj-c, and adding nothing to the code, the app starts and shows the window. Now I added my Apple ID in Xcode accounts preferences, a cert is created and a personal team is created bearing

Can't code-signing validate an App's main executable, without its whole bundle.

2016-04-27 Thread Motti Shneor
The following simple code will validate the code-signing of any Mac executable file, or App-bundle, or any code-bundle etc. However, if handed a path to an executable which happens to be the main executable of an App bundle (example `/Applications/Mail.app/Contents/MacOS/Mail`) The

Code signing problem using shared framework in Yosemite-SOLVED

2014-10-13 Thread Bill Cheeseman
On Oct 12, 2014, at 12:21 PM, Bill Cheeseman wrote: > The code signing warning is surprising, because both the UI Browser > application and the framework pass all of the codesign tests for proper > signatures on disk. > > Is code signing now making it impossible to use share

Re: Code signing problem using shared framework in Yosemite

2014-10-12 Thread Bill Cheeseman
On Oct 12, 2014, at 12:42 PM, Scott Ribe wrote: > On Oct 12, 2014, at 10:24 AM, Bill Cheeseman wrote: > >> ...both the UI Browser application and the framework pass all of the >> codesign tests for proper signatures on disk. > > spctl --assess??? > > I've run into many cases where codesign

Re: Code signing problem using shared framework in Yosemite

2014-10-12 Thread Bill Cheeseman
Applications folder). So I removed all of those and tried again, and -- same failure. >> Is code signing now making it impossible to use shared frameworks at all, >> going forward? That would be a huge change to spring on the developer >> community without advance warning. &g

Re: Code signing problem using shared framework in Yosemite

2014-10-12 Thread Scott Ribe
On Oct 12, 2014, at 10:24 AM, Bill Cheeseman wrote: > ...both the UI Browser application and the framework pass all of the codesign > tests for proper signatures on disk. spctl --assess??? I've run into many cases where codesign says all ok, but spctl finds a problem. (My app embeds an Automa

Re: Code signing problem using shared framework in Yosemite

2014-10-12 Thread Kyle Sluder
On Oct 12, 2014, at 9:24 AM, Bill Cheeseman wrote: > > I'm updating my UI Browser application and my related PFAssistive framework > <http://pfiddlesoft.com> for Yosemite, and I've run into a specific problem > related to code signing. I'm wondering

Code signing problem using shared framework in Yosemite

2014-10-12 Thread Bill Cheeseman
I'm updating my UI Browser application and my related PFAssistive framework <http://pfiddlesoft.com> for Yosemite, and I've run into a specific problem related to code signing. I'm wondering if anyone can shed light on this. Specifically, UI Browser calls my framework&

Re: information about provisioning and code signing - in code

2014-03-06 Thread Torsten Curdt
To answer my own question with some code: https://github.com/tcurdt/TCMobileProvision Let's you access the embedded provisioning profile at runtime. cheers, Torsten On Thu, Feb 27, 2014 at 12:46 PM, Torsten Curdt wrote: > Hey there, > > I know on 10.6+ you can use "SecStaticCodeCreateWithPat

information about provisioning and code signing - in code

2014-02-27 Thread Torsten Curdt
Hey there, I know on 10.6+ you can use "SecStaticCodeCreateWithPath" and friends to verify the app signature in code. Is there also a way on iOS to somehow access information about things like provisioning profile/certificate from within the app? Ideally I would like to get access to the provisi

Re: Code signing Quick Look Generators?

2013-03-09 Thread Samuel Williams
I thought I should add - it works fine if I don't sign the quick look generator - however, I guess for the App Store everything has to be signed so this isn't really an option. On 10 March 2013 03:31, Samuel Williams wrote: > Hi, > > I have a Quick Look Generator for my application Library Inspe

Code signing Quick Look Generators?

2013-03-09 Thread Samuel Williams
Hi, I have a Quick Look Generator for my application Library Inspector which won't generate thumbnails on 10.8.2. It does work fine for previews (e.g. pressing space bar) however, and it also works fine in 10.7 for thumbnails. In 10.8 it appears there is an issue with sandboxing and generating thu

Re: Security-scoped bookmarks linked to code signing?

2012-10-25 Thread Mike Abdullah
On 25 Oct 2012, at 22:05, Alex Zavatone wrote: > > On Oct 25, 2012, at 11:35 AM, Sean McBride wrote: > >> On Thu, 25 Oct 2012 00:05:44 +0100, Mike Abdullah said: >> >>> Is it possible http://www.mikeabdullah.net/nsurl-bookmark-error- >>> handling.html is biting you? >> >> Interesting bug. I

Re: Security-scoped bookmarks linked to code signing?

2012-10-25 Thread Alex Zavatone
On Oct 25, 2012, at 11:35 AM, Sean McBride wrote: > On Thu, 25 Oct 2012 00:05:44 +0100, Mike Abdullah said: > >> Is it possible http://www.mikeabdullah.net/nsurl-bookmark-error- >> handling.html is biting you? > > Interesting bug. I wonder if everyone inside Apple is using ARC these days > an

Re: Security-scoped bookmarks linked to code signing?

2012-10-25 Thread Alex Zavatone
On Oct 25, 2012, at 11:35 AM, Sean McBride wrote: > On Thu, 25 Oct 2012 00:05:44 +0100, Mike Abdullah said: > >> Is it possible http://www.mikeabdullah.net/nsurl-bookmark-error- >> handling.html is biting you? > > Interesting bug. I wonder if everyone inside Apple is using ARC these days > an

Re: Security-scoped bookmarks linked to code signing?

2012-10-25 Thread Sean McBride
On Thu, 25 Oct 2012 00:05:44 +0100, Mike Abdullah said: >Is it possible http://www.mikeabdullah.net/nsurl-bookmark-error- >handling.html is biting you? Interesting bug. I wonder if everyone inside Apple is using ARC these days and therefore expecting ptr-to-object variables to be nil-initialise

Re: Security-scoped bookmarks linked to code signing?

2012-10-25 Thread Mike Abdullah
> Handling security-scoped bookmarks most certainly relies upon >>>> code-signing, as without you can’t create or resolve them. Are you dealing >>>> with app or document scoped bookmarks here? >>>> >>> >>> >>>

Re: Security-scoped bookmarks linked to code signing?

2012-10-24 Thread Graham Cox
On 25/10/2012, at 10:05 AM, Mike Abdullah wrote: > > On 24 Oct 2012, at 23:31, Graham Cox wrote: > >> >> On 24/10/2012, at 8:47 PM, Mike Abdullah wrote: >> >>> Handling security-scoped bookmarks most certainly relies upon code-signing, >>> as

Re: Security-scoped bookmarks linked to code signing?

2012-10-24 Thread Mike Abdullah
On 24 Oct 2012, at 23:31, Graham Cox wrote: > > On 24/10/2012, at 8:47 PM, Mike Abdullah wrote: > >> Handling security-scoped bookmarks most certainly relies upon code-signing, >> as without you can’t create or resolve them. Are you dealing with app or >> doc

Re: Security-scoped bookmarks linked to code signing?

2012-10-24 Thread Graham Cox
On 24/10/2012, at 8:47 PM, Mike Abdullah wrote: > Handling security-scoped bookmarks most certainly relies upon code-signing, > as without you can’t create or resolve them. Are you dealing with app or > document scoped bookmarks here? > App-scoped. In dev and testing no

Re: Security-scoped bookmarks linked to code signing?

2012-10-24 Thread Mike Abdullah
> codesigning. If there is that's probably the answer, but if not I'll know to > keep looking for another reason. Handling security-scoped bookmarks most certainly relies upon code-signing, as without you can’t create or resolve them. Are you d

Security-scoped bookmarks linked to code signing?

2012-10-23 Thread Graham Cox
I'm using security-scoped bookmarks to save the location of certain folders between launches so that my sandboxed app works properly. We've had reports that resolving these bookmarks sometimes crashes deep inside the security-scoping resolution but I have been unable to reproduce this. But one

Re: Code Signing for Mountain Lion

2012-09-02 Thread Jerry Krinock
Pascal, I prepared a reply to your question but did not post because I realized this is too far off the topic of Cocoa. Please subscribe to apple-c...@lists.apple.com and re-post over there. You'll get better replies. ___ Cocoa-dev mailing list (Co

Code Signing for Mountain Lion

2012-09-02 Thread Pascal Harris
I'm just updating one of my more useful little tools (Locamatic) so that it is code signed for Mountain Lion. I know in advance that this program won't be suitable for the app store, firstly because it's a Preference Pane and secondly because it schedules shell scripts (packaged within the pref

Re: Trouble with code signing and app store submission

2012-03-30 Thread Quincey Morris
On Mar 29, 2012, at 23:41 , Martin Hewitson wrote: > According to Keychain Access, all my certificates have a private key. At > least I can expand the certificate and see the private key. Do I need to do > something to tell Xcode about these? I followed the usual steps of installing > certifica

Re: Trouble with code signing and app store submission

2012-03-30 Thread Martin Hewitson
son >>> wrote: >>> >>>> "" is a valid identity. However, the private key for the associated >>>> identity "" is not installed on this Mac. >>>> >>>> I have created new certificates, chosen the "Re

Re: Trouble with code signing and app store submission

2012-03-29 Thread Roland King
dentity. However, the private key for the associated >>> identity "" is not installed on this Mac. >>> >>> I have created new certificates, chosen the "Refresh code signing >>> identity..." option, and tried refreshing under the Teams lis

Re: Trouble with code signing and app store submission

2012-03-29 Thread Martin Hewitson
nstalled on this Mac. >> >> I have created new certificates, chosen the "Refresh code signing >> identity..." option, and tried refreshing under the Teams list in the >> organiser. Nothing helps. I'm getting this problem for two different apps. >

Re: Trouble with code signing and app store submission

2012-03-29 Thread Conrad Shultz
the private key for the associated > identity "" is not installed on this Mac. > > I have created new certificates, chosen the "Refresh code signing > identity..." option, and tried refreshing under the Teams list in the > organiser. Nothing helps. I'm g

Trouble with code signing and app store submission

2012-03-28 Thread Martin Hewitson
on the page entitled "Choose an application record and an identity to sign with:". Here's what it says: "" is a valid identity. However, the private key for the associated identity "" is not installed on this Mac. I have created new certificates, chosen th

Re: Code signing issues

2011-10-19 Thread Gideon King
I had not, but now I have - it made no difference - I still got the same cryptic error message. Regards Gideon On 18/10/2011, at 11:29 AM, Graham Cox wrote: > > On 18/10/2011, at 12:27 PM, Gideon King wrote: > >> • The system interprets the exit status and attempts to obtain a valid >> rece

Re: Code signing issues

2011-10-17 Thread Graham Cox
On 18/10/2011, at 12:27 PM, Gideon King wrote: > • The system interprets the exit status and attempts to obtain a valid > receipt. Assuming your application signing certificate is valid, the system > installs a valid receipt for the application. The system may prompt you for > your iTunes cred

Re: Code signing issues

2011-10-17 Thread Gideon King
On 18/10/2011, at 11:16 AM, Graham Cox wrote: > > However, checking apps I build with Xcode versus those I have downloaded from > the App Store shows that indeed, my dev apps do not have a receipt. Why would > they, I didn't "receive" them, I made them. > > Maybe there's a method for obtaining

Re: Code signing issues

2011-10-17 Thread Graham Cox
On 18/10/2011, at 12:07 PM, Gideon King wrote: > It can't be that the verification code is using the wrong cert, because the > receipt checking exits immediately it doesn't find a receipt in the app > wrapper, and the system takes over from there to try to get a testing receipt > from the app

Re: Code signing issues

2011-10-17 Thread Gideon King
On 18/10/2011, at 10:40 AM, Graham Cox wrote: > > To actually submit an app to the App Store, it needs to be made into a signed > installer package. The Organizer performs this packaging and signing task. > > For running in the Finder for testing, you don't need to bother with it. > However, in

Re: Code signing issues

2011-10-17 Thread Graham Cox
On 18/10/2011, at 11:59 AM, Gideon King wrote: > I thought the "Mac Developer" one was supposed to show up for use when doing > development builds. It doesn't for me, and I have never used or apparently needed it. Perhaps it's used implicitly however. --Graham _

Re: Code signing issues

2011-10-17 Thread Gideon King
For Mac development, it appears you need a "Mac Developer" cert, a "3rd Party Mac Developer Installer" cert, and a "3rd Party Mac Developer Application" cert. I have these in my keychain, however only "3rd Party Mac Developer Application" shows up in Xcode. I can understand that the installer on

Re: Code signing issues

2011-10-17 Thread Graham Cox
On 18/10/2011, at 11:19 AM, Gideon King wrote: > OK, not sure why have three certs if only one ever shows up, but if always > using the '3rd Party Mac Developer Application' for all your builds works for > you, I'll try the same. You sign the app itself (the executable) with the 'Application'

Re: Code signing issues

2011-10-17 Thread Philip Vallone
Hi, I develop for the iphone, but If the process is the same for a Mac App, you should have 2 certificates in Key chain 1. Mac Developer 2. Mac Distribution On Oct 17, 2011, at 7:34 PM, Gideon King wrote: > 1. When creating the certificates, 3 certs are created and added to the > keychain

Re: Code signing issues

2011-10-17 Thread Gideon King
Thanks for the reply Graham. I'm using Xcode 4.2. Please see comments inline On 18/10/2011, at 9:55 AM, Graham Cox wrote: > On 18/10/2011, at 10:34 AM, Gideon King wrote: > >> So I have the following questions: >> >> 1. When creating the certificates, 3 certs are created and added to the >>

Re: Code signing issues

2011-10-17 Thread Graham Cox
Hi Gideon, which version of Xcode are you using? I'm not crystal clear on the signing procedure myself, but I followed the instructions and it went smoothly, so I can at least tell you what I see for comparative purposes. I'm using Xcode 4.2 (4.1 was similar, 3.x may be different). On 18/10/20

Code signing issues

2011-10-17 Thread Gideon King
Hi, I'm trying to build App store receipt verification into my app. I went through the certificate setup process and believe I have all three keys and certificates successfully installed in my keychain. I then went into my build settings for my project to set the code signing identi

Re: Adding info plist segment for code signing messes up NSBundle

2011-10-01 Thread Jerry Krinock
On 2011 Oct 01, at 19:33, Jim O'Connor wrote: > Is there some way to get the bundle for the actual surrounding app the way I > did before I added the info.plist to my helper apps binary? I went through this drill a couple years ago. There were gotchas with every option, and after some conside

Adding info plist segment for code signing messes up NSBundle

2011-10-01 Thread Jim O'Connor
I have a helper tool which lives in Contents/MacOS along with the primary binary. The helper tool needs access to the resources in the bundle. Once I added the info plist text segment so I could sign the helper tool NSBundle won't work properly. [NSBundle mainBundle] now doesn't refer to the bun

Lion code-signing at all (was Re: Signing for sandboxing, etc)

2011-08-08 Thread Fritz Anderson
rn off entitlements. I think I've followed all the instructions, but the instructions are ambiguous and often out-of-sync with reality. And I'm rather dense. Code signing has been required for App Store submission for months, so I know that this part of the problem, at least, has been

Re: Code Signing and a Background Tool

2011-01-13 Thread Jerry Krinock
ip my products: # The 'codesign' tool will make up its own code signing "identitifer" based on a couple of different inputs, but I don't like the idea of leaving such an important parameter up to a somewhat indeterminate algorithm. Also, usually you want all executables in

Code Signing and a Background Tool

2011-01-13 Thread Matt Patenaude
Hi there, I'm having a bit of an issue with one of my applications. The way the application works is by spawning a background process at app startup, the executable for which is contained within its Resources directory. While running, however, running `codesign -v x` on the PID of the backg

Re: App Store code signing

2010-11-18 Thread James Walker
On 11/18/2010 3:43 PM, Chris Idou wrote: Is this the right forum to ask about the whole business of verifying signatures etc for apps in the app store for Mac? I've been trying to get the code to work, but I'm stumped. If you log in at devforums.apple.com, you'll find a folder devoted to the

Re: App Store code signing

2010-11-18 Thread davelist
t; You should probably use http://devforums.apple.com which requires a paid developer account. There's a section in it for the Mac App Store to discuss app submission, code signing, etc. Discussion of it on this list may even be disallowed, but I don't know that for certain. Dave __

App Store code signing

2010-11-18 Thread Chris Idou
Is this the right forum to ask about the whole business of verifying signatures etc for apps in the app store for Mac? I've been trying to get the code to work, but I'm stumped. ___ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do no

Re: Xcode 3.23 broke my code signing [FIXED]

2010-04-15 Thread Steve Mykytyn
For anyone else who runs into this: Reversion to 3.2.2 fixed the code signing issue. Black magic apparently. Nothing else worked. Apologies to anyone who thinks this should have been posted to a different list. On Apr 15, 2010, at 9:06 AM, Dave Reed wrote: > > On Apr 14, 2010, at 9

Re: Xcode 3.23 broke my code signing

2010-04-15 Thread Dave Reed
On Apr 14, 2010, at 9:25 PM, Steve Mykytyn wrote: > Project that built fine for weeks fails to pass validation, won't run when > installed. > > Ran Xcode uninstall, reinstalled from scratch, same deal. > > Other than randomly trying stuff, does anyone have a known working procedure > for fixi

Xcode 3.23 broke my code signing

2010-04-14 Thread Steve Mykytyn
Project that built fine for weeks fails to pass validation, won't run when installed. Ran Xcode uninstall, reinstalled from scratch, same deal. Other than randomly trying stuff, does anyone have a known working procedure for fixing this??? Hard to think of a less productive way to waste time.

Re: Code Signing

2009-09-07 Thread Carl Harris
Peter Hudson wrote: I was looking for a way to observe the code having been hacked - and if it has been, for the app not to run. What is the kill flag and how do I set it ? Could it be reset by someone ? Take a look at the Code Signing Services Reference: http://developer.apple.com

Re: Code Signing

2009-09-07 Thread Peter Hudson
malware from running, or make it harder for hackers (since it's trivial to remove a code signature or replace them other valid signatures). At any rate, you shouldn't be deleting those files. If you remove them, the signature will be invalidated. By the way, the best list for code

Re: Code Signing

2009-09-07 Thread Charles Srstka
On Sep 6, 2009, at 6:22 PM, Chris Suter wrote: It's important to remember that code signatures are not really there to prevent malware from running, or make it harder for hackers (since it's trivial to remove a code signature or replace them other valid signatures). Well, you can always check

Re: Code Signing

2009-09-06 Thread Chris Suter
emember that code signatures are not really there to prevent malware from running, or make it harder for hackers (since it's trivial to remove a code signature or replace them other valid signatures). At any rate, you shouldn't be deleting those files. If you remove them, the signature will be i

Re: Code Signing

2009-09-06 Thread Hal Mueller
On Sep 6, 2009, at 14:37, Charles Srstka wrote: Why are you wanting to go around deleting files from the insides of app bundles? Maybe to see what happens if the bad guys try the same trick. ___ Cocoa-dev mailing list (Cocoa-dev@lists.apple.co

Re: Code Signing

2009-09-06 Thread Charles Srstka
On Sep 6, 2009, at 6:00 AM, Peter Hudson wrote: I notice that when I sign code ( the whole app ) I land up with 2 additional items in my /Contents directory in the app bundle. These items are a folder called _CodeSignature and an alias called CodeResources. If I delete these two items, t

Re: Code Signing

2009-09-06 Thread Dave Keck
These files are certainly meant to be there. (If you happen to look in the bundles of any number of the standard Mac apps, these two resources are present.) Signing your code should happen at the very last stage of development; deleting something from your bundle after it's been signed is wrong. Y

Code Signing

2009-09-06 Thread Peter Hudson
I notice that when I sign code ( the whole app ) I land up with 2 additional items in my /Contents directory in the app bundle. These items are a folder called _CodeSignature and an alias called CodeResources. If I delete these two items, the code still identifies itself as signed ( when

Re: Code Signing

2009-09-05 Thread Peter Hudson
Thanks for this Carl - it works fine ! I'll post a documentation bug on this as the command line I was using ( -s -v ) is straight out of the doc. Peter ___ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or mo

Re: Code Signing

2009-09-05 Thread Carl Harris
Peter Hudson wrote: Using the certificate Common Name as the identifier, I run: codesign -s -v MyCertificate TestApp.app Try codesign -v -s MyCertificate TestApp.app You can also just set the Code Signing Identity build property in Xcode and it will do the signing as it builds

Code Signing

2009-09-05 Thread Peter Hudson
Just starting to play with code signing. I followed the instructions ( in the ADC docs ) to create my own certificate - I seem to have succeeded and a certificate has appeared in my login keychain. Using the certificate Common Name as the identifier, I run: codesign -s -v MyCertificate

Re: Code Signing for development

2009-08-03 Thread Kyle Sluder
This question is probably better-suited to Xcode-users or the iPhone dev forums at devforums.apple.com. --Kyle Sluder ___ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact

Code Signing for development

2009-08-03 Thread Development
I'm having a heck of a time code signing for a particular members of my development group. He's on a japanese hand set and I cannot for the life of me sign an app that he can actually install. He keeps getting 'Valid SIgning Identity for this Profile not present in your k

Simple mac server app seems can't receive incoming connection (code signing problem?)

2009-04-13 Thread Bill So
ac is rebooted, I'll have to relaunch my server app. However, Leopard did prompt me the "Allow" or "Deny" incoming connection when I launch my server app. But it seems that Leopard "forgets" this when I start the system again next time. What can I do? C

Re: Code Signing for Dummies

2009-03-03 Thread Michael Ash
references (firewall and >> parental controls, are the only preferences that use code-signing at the >> moment) associated with that application apply to the new version. > >> That said, 10.5's code-signing is not the final destination of this >> feature >> in OS X.

Re: Code Signing for Dummies

2009-03-03 Thread Paul Sanders
> days :) > It is possible, but the APIs to code-signing are private. That said, they > are very easy to work with and the code is open-source > (libsecurity_codesigning). > Here is an Apple patent that talks about their code-signing library and > includes a 6-line sample for doin

Re: Code Signing for Dummies

2009-03-03 Thread Tim Murison
> OK, thank you. Is it possible, would you happen to know, for an application > to verify its own signature? I do this on Windows (using WinVerifyTrust) to > check that the code has not been tampered with. Can't trust anybody these > days :) > It is possible, but the APIs

Re: Code Signing for Dummies

2009-03-03 Thread Paul Sanders
s that use code-signing at the > moment) associated with that application apply to the new version. > That said, 10.5's code-signing is not the final destination of this > feature > in OS X. They will extend the scope of code-signing tech in 10.6 and on. > It > was stated on an

Re: Code Signing for Dummies

2009-03-03 Thread Tim Murison
(firewall and parental controls, are the only preferences that use code-signing at the moment) associated with that application apply to the new version. That said, 10.5's code-signing is not the final destination of this feature in OS X. They will extend the scope of code-signing tech in 1

Re: Code Signing for Dummies

2009-03-03 Thread Paul Sanders
>> So do I just create self-signed certificate and select it in the Xcode >> build settings and that's it? Everything is as desirable and as >> functional as need be? > Pretty much. Although in future versions Apple may elect to nag if the > certificate is not signed by a trusted root authority.

Re: Code Signing for Dummies

2009-03-03 Thread Tim Murison
> So do I just create self-signed certificate and select it in the Xcode > build settings and that's it? Everything is as desirable and as > functional as need be? Pretty much. Although in future versions Apple may elect to nag if the certificate is not signed by a trusted root authority. ___

Code Signing for Dummies

2009-03-02 Thread Seth Willits
Alright, so I've read the docs on code signing, but it's a little too detailed in some areas and has no big picture. I have a typical bundled Cocoa app that uses a few frameworks. I want to use code signing so that each time I update the app, users don't get the keyc

Re: Code Signing Examples

2009-02-20 Thread Chris Suter
Hi Tom, (Sorry Tom for the duplicate—I meant to send this to the list earlier. Also, cross posting is generally frowned upon and the best list for code signing questions is the apple-cdsa list.) On Sat, Feb 21, 2009 at 1:47 AM, Tom Fortmann wrote: > Can anyone point me to sample code on how

RE: Code Signing Examples

2009-02-20 Thread Tom Fortmann
PM To: Tom Fortmann Cc: cocoa-dev@lists.apple.com; darwin-...@lists.apple.com Subject: Re: Code Signing Examples On Feb 20, 2009, at 6:47 AM, Tom Fortmann wrote: > Can anyone point me to sample code on how to verify an application > or process is signed? My application executes a c

Re: Code Signing Examples

2009-02-20 Thread Olivier Palliere
Hi Tom, Maybe you can have a look at what Mike Bombich did a few years ago, really great stuff on Authenticated Application, and proven to be VERY useful. https://source.bombich.com/websvn/listing.php?repname=Authenticated_Application&path=%2F&sc=1 Oli./. On Feb 20, 2009, at 3:47 PM, Tom

Code Signing Examples

2009-02-20 Thread Tom Fortmann
Can anyone point me to sample code on how to verify an application or process is signed? My application executes a couple other processes and I would like to validate their signatures before I blindly execute them. I've found a ton of Apple documentation on the theory but not a lot on practical a

Re: Code signing and verification

2008-11-26 Thread Chris Hanson
On Nov 26, 2008, at 7:32 PM, Donnie Lee wrote: There is currently no public API for code signing. You can use the codesign command line tool. See the man page for how to use it and all of the various options available. That is really sad :( Thank you for the answer, Michael! As always

Re: Code signing and verification

2008-11-26 Thread Donnie Lee
with my certificate, not with any other >> certificate. Can you tell me what class/functions I should to use? > > There is currently no public API for code signing. You can use the > codesign command line tool. See the man page for how to use it and all > of the various options ava

Re: Code signing and verification

2008-11-26 Thread Michael Ash
om objective-c/cocoa. Also I need to verify > that the program was signed with my certificate, not with any other > certificate. Can you tell me what class/functions I should to use? There is currently no public API for code signing. You can use the codesign command line tool. See the man pag

Code signing and verification

2008-11-26 Thread Donnie Lee
Hello. I'd like to sign my Application and check this signature from another my Application. I've found how to sign an app, but I can't find how to check already signed app from objective-c/cocoa. Also I need to verify that the program was signed with my certificate, not with any other certificate

Re: Code signing validation

2008-10-28 Thread Jean-Daniel Dupas
code signing for my app I wanted to be able to do a quick visual check that things were as they should be. I used the following to display a code signing validation message in the app About window for both the application bundle and a couple of auxiliary executables. Has anyone else done

Re: Code signing validation

2008-10-28 Thread Conor
> even a removed localisation would then be fatal Just a clarification: removing a localization does not affect the signature (http://atomic-bird.com/blog/2007/11/leopard-code-signing-questions-and-answers ). Regards, Conor ___ Cocoa-dev mail

. Re: Code signing validation

2008-10-28 Thread [EMAIL PROTECTED]
I am aware of the -o kill flag but I am not sure that killing my code stone dead is what I require in this case. Any resource change, even a removed localisation would then be fatal. For me a string representation of the code signing is more of a sanity check. I just pass the "-o

Re: Code signing validation

2008-10-28 Thread David Riggle
I just pass the "-o kill" flags to codesign. That way if the app has been tampered with it won't launch. Make sure you are using Xcode 3.1 or later so the codesigning is done after the stripping. Dave ___ Cocoa-dev mailing list (Cocoa-dev@lists.app

Code signing validation

2008-10-28 Thread [EMAIL PROTECTED]
Hello list Having implemented code signing for my app I wanted to be able to do a quick visual check that things were as they should be. I used the following to display a code signing validation message in the app About window for both the application bundle and a couple of auxiliary

Re: Code signing and bundle layout

2008-06-23 Thread Jeff Johnson
On Jun 23, 2008, at 7:49 AM, Bill Cheeseman wrote: on 2008-06-23 7:02 AM, Trygve Inda at [EMAIL PROTECTED] wrote: I have a prefpane that contains two helper applications (which are themselves bundles). These are currently in the Resources folder, but it looks like they should move. Do I crea

  1   2   >