On 2009 May 20, at 23:20, Kevin LaCoste wrote:
The docs clearly state that anything in Contents/MacOS is covered by
the app bundles signature.
Nope. The Code Signing Guide is ambiguous at best on this point, and
so I just sent them feedback "It wasn't helpful".
Also, it does not work according to your interpretation:
# Sign the bundle:
Jerrys-Mac-Mini:~ jk$ codesign -s "Sheep Systems Code Signing" -i
BookMacster -v "/Users/jk/Documents/Programming/Builds/Debug/
BookMacster.app"
/Users/jk/Documents/Programming/Builds/Debug/BookMacster.app: signed
bundle with Mach-O thin (i386) [BookMacster]
# Check if helper in Contents/MacOS got signed:
Jerrys-Mac-Mini:~ jk$ codesign -dv "/Users/jk/Documents/Programming/
Builds/Debug/BookMacster.app/Contents/MacOS/
AuthorizedTaskHelperToolInstaller"/Users/jk/Documents/Programming/
Builds/Debug/BookMacster.app/Contents/MacOS/
AuthorizedTaskHelperToolInstaller: code object is not signed
# Sign that helper itself:
Jerrys-Mac-Mini:~ jk$ codesign -s "Sheep Systems Code Signing" -i
BookMacster -v "/Users/jk/Documents/Programming/Builds/Debug/
BookMacster.app/Contents/MacOS/AuthorizedTaskHelperToolInstaller"
/Users/jk/Documents/Programming/Builds/Debug/BookMacster.app/Contents/
MacOS/AuthorizedTaskHelperToolInstaller: signed Mach-O thin (i386)
[BookMacster]
# Check it again:
Jerrys-Mac-Mini:~ jk$ codesign -dv "/Users/jk/Documents/Programming/
Builds/Debug/BookMacster.app/Contents/MacOS/
AuthorizedTaskHelperToolInstaller"Executable=/Users/jk/Documents/
Programming/Builds/Debug/BookMacster.app/Contents/MacOS/
AuthorizedTaskHelperToolInstaller
Identifier=BookMacster
Format=Mach-O thin (i386)
CodeDirectory v=20001 size=196 flags=0x0(none) hashes=5+2
location=embedded
Signature size=1680
Signed Time=2009 May 21 09:43:13
Info.plist=not bound
Sealed Resources=none
Internal requirements count=0 size=12
#####
Read the new message from Perry in that thread I linked to yesterday.
He's clarified this further.
And again, we should be discussing this over there instead of here,
although I believe it's settled now :)
_______________________________________________
Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
