<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Jim,</div><div><br></div><div>The Installer was signed, but not using a DeveloperID issued Certificate. As noted with the installers and the blog entry:</div><div><blockquote style="margin: 0 0 0 40px; border: none; padding: 0px;"><div><p style="font-family: 'Lucida Grande', Verdana, Arial, Helvetica, sans-serif; font-size: 13px; background-color: rgb(255, 255, 255); "><strong>Installers</strong></p><p style="font-family: 'Lucida Grande', Verdana, Arial, Helvetica, sans-serif; font-size: 13px; background-color: rgb(255, 255, 255); ">The Installers have been digitally signed, but it is possible you may not have the intermediate CA certificate on your system yet. If you do not have it, you can pull it down from <a href="https://www.apple.com/certificateauthority/" target="_self" style="font-size: 11px; font-weight: bold; color: rgb(0, 0, 204); text-decoration: none; border-bottom-style: none; ">Apple's Root Certification Authority</a> site with the specific Intermediate CA certificate you need found --> <a href="http://developer.apple.com/certificationauthority/AppleWWDRCA.cer" target="_self" style="font-size: 11px; font-weight: bold; color: rgb(0, 0, 204); text-decoration: none; border-bottom-style: none; ">HERE</a> <--.</p><p style="font-family: 'Lucida Grande', Verdana, Arial, Helvetica, sans-serif; font-size: 13px; background-color: rgb(255, 255, 255); position: static; z-index: auto; ">The installers are located on the Project's Installers page which you can get to --> <a title="HERE" href="http://smartcardservices.macosforge.org/trac/wiki/installers" target="_self" style="font-size: 11px; font-weight: bold; color: rgb(0, 0, 204); text-decoration: none; border-bottom-style: none; ">HERE</a> <-- as well as clicking on the <strong>Installers</strong> link on the left side of this page.</p></div></blockquote></div><div><br></div><div>In your case, the reason I included the reference to the Gatekeeper KBase, is that you and others would need to allow this from "Anywhere" in System Preference or perform the manual override for the installer. This would not be necessary if the MacOSForge Projects were issued DeveloperIDs for code signing, but that has not yet been the case. Until then, the signature is providing integrity assurance that it came from me, but not under the official DeveloperID program today.</div><div><br></div><div>-Shawn</div><div><br></div><br><div><div>On May 10, 2013, at 12:31 PM, Jim Thomas <<a href="mailto:jim@thursby.com">jim@thursby.com</a>> wrote:</div><blockquote type="cite">
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
<div bgcolor="#FFFFFF" text="#000000">
Shawn,<br>
<br>
I apologize, this may just be a false flag based on something Apple
changed. <font face="Helvetica, Arial, sans-serif">From the Apple
Developer Discussions:<br>
<br>
<a class="moz-txt-link-freetext" href="https://discussions.apple.com/thread/4922849?start=0&tstart=0">https://discussions.apple.com/thread/4922849?start=0&tstart=0</a><br>
<br>
</font>--------------------------------------------------------------------------------
<p>I had the same issue since 10.8.3</p><p>I used to execute:</p><p><span style="font-family: Geneva;">productsign --sign 3rd Party
Mac Developer Installer: <span style="font-family: Geneva; font-size: 12px; text-align: -webkit-auto; ">MyCompagny </span><Source>
<Destination> --cert Apple Worldwide Developer Relations
Certification Authority</span></p><p>The correct use of productsign is:</p><p style="font-family: Helvetica; font-size: medium; text-align: -webkit-auto; "><span style="font-size: 12px;
font-family: Geneva;"><strong>productsign --sign Developer ID
Installer: MyCompagny <Source> <Destination><br>
</strong></span></p><p style="font-family: Helvetica; font-size: medium; text-align: -webkit-auto; ">--------------------------------------------------------------------------------<br>
</p><p style="font-family: Helvetica; font-size: medium; text-align: -webkit-auto; ">I hope this helps.<br>
</p><p style="font-family: Helvetica; font-size: medium; text-align: -webkit-auto; "><br>
</p><p style="font-family: Helvetica; font-size: medium; text-align: -webkit-auto; ">Regards,<br>
<br>
Jim Thomas, CSCIP/G<br>
<br>
</p>
<br>
<br>
<div class="moz-cite-prefix">On 5/10/13 9:29 AM, Shawn Geddis wrote:<br>
</div>
<blockquote cite="mid:241AF608-AEC0-4D43-A115-1077342AC9B1@me.com" type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div>Jim,</div>
<div><br>
</div>
<div>OS X: About Gatekeeper<span class="Apple-tab-span" style="white-space:pre"> </span>(OS X Lion, OS X Mountain
Lion)</div>
<div><span class="Apple-tab-span" style="white-space:pre"> </span><a moz-do-not-send="true" href="http://support.apple.com/kb/HT5290">http://support.apple.com/kb/HT5290</a></div>
<div><br>
</div>
<div><br>
</div>
-Shawn
<div><br>
<div>
<div>On May 10, 2013, at 9:31 AM, Jim Thomas <<a moz-do-not-send="true" href="mailto:jim@thursby.com">jim@thursby.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">Shawn,<br>
<br>
I noticed this with our own installers, and in
troubleshooting, found it with yours, too.<br>
<br>
With Gatekeeper set to default, double-clicking the signed
installer pkg results in the following error:<br>
----------------------------------------<br>
"Smart Card Services Update 2.0b2-ML-signed" can't be
installed because it is from an unidentified developer.<br>
Your security preferences allow installation of only apps
from the Mac App Store and identified developers.<br>
----------------------------------------<br>
<br>
Any insight would be appreciated.<br>
<br>
Regards,<br>
<br>
Jim Thomas, CSCIP/G<br>
_______________________________________________<br>
SmartcardServices-Users mailing list<br>
<a moz-do-not-send="true" href="mailto:SmartcardServices-Users@lists.macosforge.org">SmartcardServices-Users@lists.macosforge.org</a><br>
<a class="moz-txt-link-freetext" href="https://lists.macosforge.org/mailman/listinfo/smartcardservices-users">https://lists.macosforge.org/mailman/listinfo/smartcardservices-users</a><br>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</div>
</blockquote></div><br></body></html>