From: Matt B. <wal...@ma...> - 2020-11-25 15:48:50
|
> On Nov 25, 2020, at 8:29 AM, Michael Sweet <ms...@ms...> wrote: > > [I'll preface this with: I have no idea how much time I'll be able to devote to this...] > > All, > > I saw Matt's recent message concerning the lack of a macOS maintainer. As someone who has had to deal with Apple's notarization process, it is 100% possible to automate both the code signing and notarization but *does* require the $99/year developer account to have the Developer ID installer and application code signing certs. This is a bargain for code signing BTW - on Windows you have to buy code signing certs from a CA which cost from a little to a lot more, not to mention the hassle of dealing with the CAs who in many cases won't give an individual a code signing cert... > > Anyways, I *do* have a developer account I can use for this, and I can setup a build bot to package Gutenprint for (at least) macOS 10.13 and later. Also, I *think* I've correctly signed and notarized the current 5.3.3 package (worked without security warnings at least), and put it into a ZIP file here: > > https://www.dropbox.com/s/3223e9y5v9zcc0z/gutenprint-5.3.3-msweet.zip?dl=0 > > Perhaps that is enough for now? > > ________________________ > Michael Sweet Michael, Thank you very much for doing this. I know that Steve was having problems getting things notified. I am still running macos 10.14.6, but I think I have run the proper checks and gotten good results. If you could please take a look at this to confirm that everything is in order -- Last login: Wed Nov 25 09:40:07 on ttys002 Borodin:~ matt$ codesign -dv ~/Downloads/gutenprint-5.3.3-msweet/gutenprint-5.3.3.pkg Executable=/Users/matt/Downloads/gutenprint-5.3.3-msweet/gutenprint-5.3.3.pkg Identifier=gutenprint-5 Format=generic CodeDirectory v=20200 size=172 flags=0x0(none) hashes=1+2 location=embedded Signature size=9006 Timestamp=Nov 25, 2020 at 8:09:29 AM Info.plist=not bound TeamIdentifier=RU58A2256H Sealed Resources=none Internal requirements count=1 size=172 Borodin:~ matt$ Borodin:~ matt$ spctl -a -vvv -t install ~/Downloads/gutenprint-5.3.3-msweet/gutenprint-5.3.3.pkg /Users/matt/Downloads/gutenprint-5.3.3-msweet/gutenprint-5.3.3.pkg: accepted source=Notarized Developer ID origin=Developer ID Installer: Stephen Letter (63GMK36MRC) Borodin:~ matt$ Thanks again for all your work. Matt -- Matt Broughton wal...@ma... |