From: Matt <wal...@ma...> - 2020-12-10 19:10:06
|
Sent from my iPad > On Dec 10, 2020, at 12:53 PM, Steve Letter <sle...@ya...> wrote: > > > Forgot to include my results > > Stephens-MacBook-Pro:Desktop sletter$ spctl -a -vvv gutenprint-5.3.4.dmg > gutenprint-5.3.4.dmg: rejected (the code is valid but does not seem to be an app) > origin=Developer ID Application: Stephen Letter (63GMK36MRC) > > Stephens-MacBook-Pro:Desktop sletter$ spctl -a -vvv -t execute /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg > /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg: rejected (the code is valid but does not seem to be an app) > origin=Developer ID Application: Stephen Letter (63GMK36MRC) > > Stephens-MacBook-Pro:Desktop sletter$ spctl -a -vvv -t install /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg > /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg: accepted > source=Notarized Developer ID > origin=Developer ID Installer: Stephen Letter (63GMK36MRC) > > Stephens-MacBook-Pro:Desktop sletter$ codesign -dv /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg > Executable=/Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg > Identifier=gutenprint-5 > Format=generic > CodeDirectory v=20200 size=172 flags=0x0(none) hashes=1+2 location=embedded > Signature size=9009 > Timestamp=Dec 10, 2020 at 1:08:23 PM > Info.plist=not bound > TeamIdentifier=63GMK36MRC > Sealed Resources=none > Internal requirements count=1 size=172 > Stephens-MacBook-Pro:Desktop sletter$ > > The ones below remain the same. Looks good to me. Yay!!! Is that the one in Snapshots? It would be great to get this installed. I am going to test v5.3.4 on a color laser this afternoon if it fires up and prints. It has been sitting idle for at least two years. I agree that we make a good team. Matt > > > On Thursday, December 10, 2020, 01:41:10 PM EST, Steve Letter via Gimp-print-devel <gim...@li...> wrote: > > > Matt, > > Thanks. We make a great team. As you found, I did not sign the package. Doing that gave me results that matched Michael's 5.3.3. I replaced the disk image in snapshots. If you would can find the time I'd appreciate anything more you can do to verify it. > > Steve Letter You're never to old to learn something stupid. -- unknown > > > On Thursday, December 10, 2020, 08:34:43 AM EST, Matt Broughton <wal...@ma...> wrote: > > > > > > On Dec 9, 2020, at 9:57 PM, Matt Broughton <wal...@ma...> wrote: > > > > Try running > > spctl -a -vvv <path to disk image> and > > spctl -a -vvv -t execute <path to package> > > > > also > > > > codesign -dv <path to disk image> and > > codesign -dv <path to package> > > > > That should give you the answer or some indication. > > > > I'll try to look at things tomorrow. > > > > Matt > > > > > >> On Dec 9, 2020, at 9:13 PM, Steve Letter <sle...@ya...> wrote: > >> > >> My understanding, everything underneath gets notarized but that’s why I am asking for testers. > >> > >> Steve Letter > >> Sent from my Symbolics Lisp Machine using rmail. > > I am showing that nothing has been notarized. I am a bit confused as to the responce of codesign that the package has not been signed. pkgutil shows that the installer at least has a valid signature > > > Last login: Thu Dec 10 07:07:00 on ttys000 > Borodin:~ matt$ spctl -a -vvv /Users/matt/Downloads/gutenprint-5.3.4-2.dmg > /Users/matt/Downloads/gutenprint-5.3.4-2.dmg: rejected > source=no usable signature > Borodin:~ matt$ codesign -dv /Users/matt/Downloads/gutenprint-5.3.4-2.dmg > /Users/matt/Downloads/gutenprint-5.3.4-2.dmg: code object is not signed at all > Borodin:~ matt$ > Borodin:~ matt$ > Borodin:~ matt$ > > /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg: rejected > source=no usable signature > Borodin:~ matt$ > Borodin:~ matt$ codesign -dv /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg > /Volumes/gutenprint-5.3.4/gutenprint-5.3.4.pkg: code object is not signed at all > Borodin:~ matt$ > > > Borodin:~ matt$ > > Package "gutenprint-5.3.4.pkg": > Status: signed by a certificate trusted by Mac OS X > Certificate Chain: > 1. Developer ID Installer: Stephen Letter (63GMK36MRC) > SHA1 fingerprint: 8C 21 B8 23 C2 C7 3F C4 53 F5 A6 2E 98 AE 59 62 52 A3 A0 BF > ----------------------------------------------------------------------------- > 2. Developer ID Certification Authority > SHA1 fingerprint: 3B 16 6C 3B 7D C4 B7 51 C9 FE 2A FA B9 13 56 41 E3 88 E1 86 > ----------------------------------------------------------------------------- > 3. Apple Root CA > SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60 > > Borodin:~ matt$ > > > Matt > > >> > >>> On Dec 9, 2020, at 8:31 PM, Matt <wal...@ma...> wrote: > >>> > >>> > >>>> On Dec 9, 2020, at 1:49 PM, Steve Letter via Gimp-print-devel <gim...@li...> wrote: > >>>> > >>>> I have available for testing an allegedly notarized disk image of gutenprint-5.3.4. Where should I upload it to? It is the same build (but different date / time) as the one I uploaded the other day. > >>>> > >>>> Steve Letter > >>> > >>> I didn’t know you had to sign the disk image. I thought it was only the installer or any code. If the disk image image is notarized, does that also notarize the installer? Do you have the commands to check for notarization? I can always post them. > >>> Matt > >> > > > _______________________________________________ > Gimp-print-devel mailing list > Gim...@li... > https://lists.sourceforge.net/lists/listinfo/gimp-print-devel |