Making Sense of Apple’s Notarization

Checking existing software for compatibility

PKGs


$ pkgutil --check-signature <path to pkg>
$ pkgutil --check-signature 1Password-7.3.1.pkgPackage “1Password-7.3.1.pkg”:
Status: signed by a certificate trusted by Mac OS X
Certificate Chain:
1. Developer ID Installer: AgileBits Inc. (2BUA8C4S2C)
SHA1 fingerprint: 3F F5 AB E5 D3 F8 3D FD 81 57 C8 6A 30 19 C7 73 99 BA 0D 25
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — -
2. Developer ID Certification Authority
SHA1 fingerprint: 3B 16 6C 3B 7D C4 B7 51 C9 FE 2A FA B9 13 56 41 E3 88 E1 86
— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — -
3. Apple Root CA
SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60
$ stapler validate <path to pkg>$ stapler validate 1Password-7.3.1.pkgProcessing: /Users/aduss/Downloads/1Password-7.3.1.pkg
The validate action worked!

DMGs

$ spctl -a -t open --context context:primary-signature -v <path to dmg>$ spctl -a -t open --context context:primary-signature -v Dropbox-76.4.126.dmg./Dropbox-76.4.126.dmg: accepted
source=Developer ID
$ stapler validate <path to dmg>$ stapler validate Dropbox-76.4.126.dmgProcessing: Dropbox-76.4.126.dmg
Dropbox-76.4.126.dmg does not have a ticket stapled to it.

Applications

$ codesign -dv <Path to App>$ codesign -dv /Applications/Spotify.app/Executable=/Applications/Spotify.app/Contents/MacOS/Spotify
[ .. snip .. ]
Signature size=9046
[ .. snip .. ]
$ stapler validate <Path to App>$ stapler validate /Applications/Spotify.appProcessing: /Applications/Spotify.app
Spotify.app does not have a ticket stapled to it.

So how can we fix this?

--

--

--

Web Developer, Marathon Runner, Coffee Drinker.

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Week 3 -Yieldly No-Loss Lottery Results

Casino slot machines

Join #AepAbu Genesis squad Whitelist is open, Join now !

Creating and customizing your pyspark image

Stepping up Stones Foresee Past Challenges

iAllowance 3.0

AWS Cloud Development Kit — From Beginner to Professional

[Help]Play MCS with your friends in the Arena!

Cars get old too

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Andy

Andy

Web Developer, Marathon Runner, Coffee Drinker.

More from Medium

Spam for Breakfast, Lunch, or Dinner

Most delicious enchiladas recipe

Fat and Furious: How I got Fit, Stayed Fat, and Found My Purpose

My fit legs, fat belly, and clear head.

A week in Tbilisi