|
From: Craig B. <cra...@ma...> - 2026-03-21 23:00:30
|
> On Mar 11, 2026, at 6:24 AM, Juri Leino <ju...@ex...> wrote:
>
> We are glad to announce that exist-db version 6.4.1 is now released and available o
>
Thanks to all who worked to make this happen.
I do have one nit to pick. On macOS the situation is the same as in previous releases in that the app is not notarized so it is difficult to open the first time, and each release of macOS makes that more difficult. The app does appear to be signed with an Apple Developer ID:
% codesign -dv --verbose /Volumes/eXist-db/eXist-db.app
Executable=/Volumes/eXist-db/eXist-db.app/Contents/MacOS/eXist-JavaAppLauncher
Identifier=org.exist.start.Main
Format=app bundle with Mach-O universal (x86_64 arm64)
CodeDirectory v=20500 size=704 flags=0x10000(runtime) hashes=11+7 location=embedded
Signature size=9070
Authority=Developer ID Application: eXist Solutions GmbH (TK5UZLQZR2)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=Mar 5, 2026 at 4:16:44 PM
Info.plist entries=25
TeamIdentifier=TK5UZLQZR2
Runtime Version=14.4.0
Sealed Resources version=2 rules=13 files=468
Internal requirements count=1 size=180
but it is either not notarized or the notarization ticket is not stapled to the package:
% stapler validate /Volumes/eXist-db/eXist-db.app
Processing: /Volumes/eXist-db/eXist-db.app
eXist-db.app does not have a ticket stapled to it.
I know I'm asking developers to jump through more hoops, but that seems to me preferable to asking users to ignore scary security warnings.
________________________________________
Craig A. Berry
"... getting out of a sonnet is much more
difficult than getting in."
Brad Leithauser
|