osmith
/
wireshark
forked from osmocom/wireshark
1
0
Fork 0
Code Pull Requests Releases Wiki Activity

Be exceedingly diligent about checking OS X package signatures. 

svn path=/trunk/; revision=53242
This commit is contained in:
Gerald Combs 2013-11-10 21:44:50 +00:00
parent 4945174ae6
commit 1fc8fd9ba2
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
packaging/macosx/osx-dmg.sh.in
View File

@ -164,8 +164,9 @@ if [ -n "$CODE_SIGN_IDENTITY" ] ; then
mv "$pkg_file" "$pkg_file_unsigned" || exit 1
productsign --sign "Developer ID Installer: $CODE_SIGN_IDENTITY" "$pkg_file_unsigned" "$pkg_file" || exit 1
codesign --sign "$CODE_SIGN_IDENTITY" --verify "$pkg_file" || exit 1
spctl --assess --type install "$pkg_file" #|| exit 1
shasum "$pkg_file"
spctl --assess --type install "$pkg_file" || exit 1
pkgutil --check-signature "$pkg_file" || exit 1
shasum "$pkg_file"
rm -rf "$pkg_dir_unsigned" "$pkg_file_unsigned" "$pkg_file_flattened"
else
echo "Code signing not performed (no identity)"