Questions tagged [code-signing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
44
votes
1answer
29k views

How can I determine if a certain .app file is signed

Get Info on an .app does not produce the signature information. On Windows for example, right-click > properties will expose who signed the file. How do I obtain that info for a given .app on OS X?
28
votes
4answers
10k views

Can Mac App Store installs & upgrades be automated?

How can I script installing or upgrading apps from the Mac App Store? I'd prefer command line tools, but AppleScript or some other API would suffice. Relevant puzzle pieces: installer: note ...
23
votes
2answers
58k views

“XXX can't be opened. You should move it to trash.” for flash projector applications on mac os sierra

We are experiencing a problem with flash projector .app executables that we build. When the app is downloaded from the internet on OSX sierra the message "XXX can't be opened. You should move it to ...
20
votes
2answers
2k views

Forcing `open` command to open unsigned app?

I've got my Security preferences set to allow apps downloaded from "Mac App Store and identified developers." When I try to open an unsigned app: open xyz.app I see the following: Usually, I right-...
18
votes
6answers
10k views

How can I opt out of updates for one app when using the App Store?

I have an app that has been radically changed (Skitch) and I'd prefer to not see any of the updates that the developer has made available to that app on the App Store. I'm lazy and like to use the "...
15
votes
2answers
83k views

How can I disable kext signing in Mac OS X 10.10 Yosemite?

I know the disadvantages of disabling kext signing, but I was wondering how I can actually disable this on Mac OS X 10.10 "Yosemite"?
13
votes
2answers
7k views

When applications are code-signed, what parts of the .app bundle does the signature cover?

In Mountain Lion, I know that some applications, including all applications on the Mac App Store are digitally signed by the developer, so that if they are modified, the signature will not match, and ...
12
votes
1answer
4k views

What are the restrictions of ad-hoc code signing?

It is possible to sign code or apps "ad-hoc" using codesign. The man page tells us the following about ad-hoc code signing: If identity is the single letter "-" (dash), ad-hoc signing is performed. ...
11
votes
3answers
3k views

Should I sign open source code myself?

I use macOS 10.14 and came across a problem when I tried to install an open source plugin for Vim that I found on Github. I downloaded the source code and compiled it myself, which worked well, but ...
9
votes
1answer
1k views

App can not be opened because it is from an unidentified developer

Question: Please note before reading this that: "Tell them to go to System preferences > Security & privacy and allow 3rd party applications to run. Is not an acceptable solve for this issue. ...
8
votes
2answers
12k views

Can you disable a code signature check?

I wrote a patch/utility that disables OS X's default functionality of starting iTunes when the play button is pressed. This utility basically modifies the Remote Control Daemon (rcd) and comments out ...
7
votes
1answer
3k views

Is my private key available in the Time Machine backups? Where can I find it?

I've used Time Machine on my Mac to perform backups of my Lion install. My SSD failed and I installed Mountain Lion on my machine. Now, I want to recover my private key from my backup so I can ...
7
votes
4answers
13k views

How can I tell which Apple ID has signed/purchased specific apps on iOS?

I have an iPhone I'm trying to restore and the restore keeps failing. Specifically, I'm asked to enter the password for family members. I must decline that for secret reasons. Also, family sharing ...
6
votes
1answer
452 views

How can I modify a package from the Mac App Store?

I used to hack at apps on my Mac all the time (change the icons/sounds etc... in the resources folder of the package). I have tried with apps downloaded from the App Store, but it no longer seems to ...
5
votes
4answers
3k views

Codesign dialog does not allow “accept”

Whenever I run codesign from the command line (or a pre-existing script tries to run it) – e.g. by running codesign -s "Local Developer" foo the following dialog appears. Clicking 'Deny' cancels it ...
5
votes
2answers
6k views

Load untrusted kernel extension in macOS Mojave

The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave. This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
5
votes
3answers
550 views

Xcode saying Network Extension capability is not enabled when it is

I have been having a lot of issues for the last two weeks trying to sign and distribute a 3rd party MacOS app. I am unable to sign an app with Xcode properly because Xcode is saying that I do not have ...
4
votes
1answer
457 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
4
votes
1answer
536 views

Gatekeeper refuses validly signed application

I am trying to publish a signed application, but when downloading it through internet, gatekeeper complains: Furthermore, the help page says that the app has been tampered with: Which is actually ...
4
votes
1answer
337 views

Deploy iOS app on personal devices

I've been working on a small iOS app, intended as a gift to some family members. To my dismay, I'm finding a lot of barriers to attempting to deploy the app. It largely revolves around signing the app ...
4
votes
1answer
551 views

OS X codesigning certificate expriry

We use Apple code signing certificates to sign apps so that users can know we made the app. What happens to the users when our certificate expires? Does it mean that app will now appear untrusted or ...
4
votes
0answers
912 views

Options for signing kernel extensions for loading under Yosemite without apple-issued certificate?

Has anyone tried to use codesign to self-sign a previously-unsigned kext for personal use under Yosemite (10.10)? Self-signing is discussed in this apple technote, but not for kernel extensions ...
3
votes
1answer
608 views

Different enterprise signed apps on same iOS device

Company A has an Apple Enterprise Developer account and distributes "in-house" iOS applications signed with its account key. Likewise, Company B does the same with its own in-house apps. Is it ...
3
votes
3answers
18k views

Anyone with experience in hacking the codesigning on OS X?

Apparently Mavericks doesn't allow any property list/configuration file to be used when it's been changed since release from Apple.(This opposed to previous versions of OS X, where you could do some ...
3
votes
1answer
2k views

Can I re-purchase an app with a different apple ID?

I have a development machine that another employee (who has left) purchased Xcode on. Now I want to update Xcode, but I don't have that employee's apple ID information. I signed out of the App Store ...
3
votes
1answer
3k views

How to compile an app on Xcode without developer account

as you know from Xcode 7 and onwards it's possible to compile an app for your device. Yesterday I tried to compile Kodi on Xcode 7. It says it's possible to compile with Xcode 7 without any ...
3
votes
1answer
10k views

“The installation failed. The installer could not install the software because there was no software found to install.”

I'm getting this error on my mid '11 Mac Mini (running OS X El Capitan 10.11.6) when I'm trying to install an audio plug-in by Presonus, the demo of OrangeVocoder 10th Anniversary Edition. The ...
3
votes
2answers
9k views

macOS Sierra GDB not codesigned

First I should note that I'm using macOS Sierra (version 10.12 beta 16A238m), but I don't think it's that different than El Capitan in this certain situation (but I guess you know more than I do about ...
3
votes
1answer
568 views

Signing an App that includes Java fails

I try to sign an app-bundle that includes the Java Runtime Environment 8 (JRE). From command line I run this command: codesign -s "Developer ID Application: My Company" /Development/MyApp.app I get ...
3
votes
0answers
204 views

High Sierra installer has “sealed resources” v2 but says “resource envelope is obsolete”

Setting up a new laptop... I downloaded the Install macOS High Sierra.app from the app store on an El Capitan machine. "codesign --verify --deep" on the .app says: /Applications/Install macOS High ...
3
votes
2answers
609 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...
2
votes
2answers
6k views

Identity not found when trying to code-sign an application with a certificate

After properly creating a valid certificate for code signing, when running the command: $ codesign -s CertificateName AppPathName I always get a: CertificateName: no identity found Anyways, When I ...
2
votes
1answer
1k views

Running a command via SSH on the Mac causes exception; works fine when directly connected

I am trying to sign some code for an application. I can log into my Mac (Mountain Lion) and do this easily: codesign -s "Developer ID Application: My Name" -f /path/to/appfile/mounted/elsewhere.app '...
2
votes
1answer
154 views

Why is my codesigned app still quarantined by macOS?

I have a .app that is quarantined. But I am super confused - how can my .app be properly codesigned and yet still be quarantined by Apple? I have an app called iTest.app that I downloaded from my ...
2
votes
1answer
1k views

How to set a custom icon inside a signed Apple Script application?

I'm using Apple Script to distribute a signed applet, and would like to use a custom icon. However, as soon as I export it from Script Editor, the bundle loses the custom applet.icns file I put in it. ...
2
votes
1answer
2k views

codesign reports invalid Info.plist on an app dl'ed from the internet. Has the app been possibly compromised?

I downloaded an app from github (mac2imgur), and it refused to run. $ codesign -vv mac2imgur.app mac2imgur.app: invalid Info.plist (plist or signature have been modified) In architecture: x86_64 It ...
2
votes
1answer
688 views

3rd Party Mac Developer Application: DEVELOPER NAME: no identity found

I need to sign the code of an app I'm trying to submit to App Store through terminal: codesign -f -s '3rd Party Mac Developer Application: DEVELOPER NAME' --entitlements "APPNAME.entitlements" "/...
2
votes
1answer
268 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
2
votes
1answer
97 views

Apple says I'm signing an app with old OS version, and I'm not

I'm trying to submit a Java-based app to AppStore. After having the worst headaches in my life trying to sign everything my last problem (I hope!) is this: Invalid code signature - Signatures ...
2
votes
1answer
326 views

Safari seems to be modified

I just ran this command and saw that Safari was modified. $ codesign --verify -vv /Applications/Safari.app/ --validated:/Applications/Safari.app/Contents/MacOS/SafariForWebKitDevelopment /...
2
votes
1answer
1k views

Ran codesign -fs - /Applications/Utilities/Boot\ Camp\ Assistant.app how do I reverse it?

I ran codesign -fs - /Applications/Utilities/Boot\ Camp\ Assistant.app as per a post here and now I cannot launch Bootcamp Assistant at all. Is there a terminal command I can run to reverse this?
2
votes
3answers
864 views

Signing a Mac App

I'm working on getting a Mac app signed. It won't be available in the app store. I've executed the codesign executable properly, I believe, but I still get the Gatekeeper warning. Simple question: ...
2
votes
1answer
981 views

Mac App Store Upload Fail: Validation Error (SFML)

I'm working on a SFML App in Xcode 7.2, and I'm trying to upload my project build to the Mac App Store, and I'm getting the following error: An error occurred during validation Couldn't find ...
2
votes
1answer
406 views

Different owners of apps in /Applications depending on installation technique

I have noticed that pre-installed as well as apps installed from the App Store located in /Applications show permissions like this: drwxr-xr-x+ 3 root wheel 102 Jan 1 2014 Mail.app whereas ...
2
votes
0answers
147 views

Do I need to renew my Mac Developer Program enrolment to continue signing OSX apps?

A company I know has an Apple developer account and was enrolled on the Mac Developer Program in order to be able to sign apps (not for the Mac App Store, but for Gatekeeper validation purposes). ...
2
votes
0answers
541 views

codesign says 'no identity found'

I have a utility that patches the Apple remote control service so it doesn't start iTunes when pressing play. With OS X 10.8 rcd was signed by Apple. I found out that I could ad hoc sign the ...
1
vote
2answers
6k views

App hangs when run: cs_invalid_page error in logfile

I'm trying to start Sony Sound Forge Pro. It's worked before, but then I tried to update to version 2 of the app, and I started getting this error when I start it. I downgraded back to version 1 and I ...
1
vote
1answer
2k views

/usr/bin/codesign from Mac 10.9

The /usr/bin/codesign file on our server was removed. It is running version OS version 10.9. Does anyone know where I can download the codesign file for OSX 10.9? Or can anyone pull it off their ...
1
vote
1answer
628 views

Code sign on Ubuntu Server

I have a service, where an app is generated from a jar file, using Jar2App, on the fly. I use an Ubuntu Linux server as host for the service and I need to sign the app, after it is generated. How ...
1
vote
1answer
958 views

Code Signing: Where is the “encrypted hash” of a signed blob?

Reading the developer docu about Code Signing, it says in section Digital Signatures and Signed Code: To create a digital signature, the signing software computes a special type of checksum ...