<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Shawn,<br>
<br>
Thanks for that clarification. <br>
<br>
Regards,<br>
<br>
Jim Thomas, CSCIP/G<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 5/10/13 12:23 PM, Shawn Geddis
wrote:<br>
</div>
<blockquote cite="mid:54955238-324D-4078-89E1-89E3A56E156C@me.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div>Jim,</div>
<div><br>
</div>
<div>The Installer was signed, but not using a DeveloperID issued
Certificate. As noted with the installers and the blog entry:</div>
<div>
<blockquote style="margin: 0 0 0 40px; border: none; padding:
0px;">
<div>
<p style="font-family: 'Lucida Grande', Verdana, Arial,
Helvetica, sans-serif; font-size: 13px; background-color:
rgb(255, 255, 255); "><strong>Installers</strong></p>
<p style="font-family: 'Lucida Grande', Verdana, Arial,
Helvetica, sans-serif; font-size: 13px; background-color:
rgb(255, 255, 255); ">The Installers have been digitally
signed, but it is possible you may not have the
intermediate CA certificate on your system yet. If you do
not have it, you can pull it down from <a
moz-do-not-send="true"
href="https://www.apple.com/certificateauthority/"
target="_self" style="font-size: 11px; font-weight:
bold; color: rgb(0, 0, 204); text-decoration: none;
border-bottom-style: none; ">Apple's Root Certification
Authority</a> site with the specific Intermediate CA
certificate you need found --> <a
moz-do-not-send="true"
href="http://developer.apple.com/certificationauthority/AppleWWDRCA.cer"
target="_self" style="font-size: 11px; font-weight:
bold; color: rgb(0, 0, 204); text-decoration: none;
border-bottom-style: none; ">HERE</a> <--.</p>
<p style="font-family: 'Lucida Grande', Verdana, Arial,
Helvetica, sans-serif; font-size: 13px; background-color:
rgb(255, 255, 255); position: static; z-index: auto; ">The
installers are located on the Project's Installers page
which you can get to --> <a moz-do-not-send="true"
title="HERE"
href="http://smartcardservices.macosforge.org/trac/wiki/installers"
target="_self" style="font-size: 11px; font-weight:
bold; color: rgb(0, 0, 204); text-decoration: none;
border-bottom-style: none; ">HERE</a> <-- as well as
clicking on the <strong>Installers</strong> link on the
left side of this page.</p>
</div>
</blockquote>
</div>
<div><br>
</div>
<div>In your case, the reason I included the reference to the
Gatekeeper KBase, is that you and others would need to allow
this from "Anywhere" in System Preference or perform the manual
override for the installer. This would not be necessary if the
MacOSForge Projects were issued DeveloperIDs for code signing,
but that has not yet been the case. Until then, the signature
is providing integrity assurance that it came from me, but not
under the official DeveloperID program today.</div>
<div><br>
</div>
<div>-Shawn</div>
<div><br>
</div>
<br>
<div>
<div>On May 10, 2013, at 12:31 PM, Jim Thomas <<a
moz-do-not-send="true" href="mailto:jim@thursby.com">jim@thursby.com</a>>
wrote:</div>
<blockquote type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<div bgcolor="#FFFFFF" text="#000000"> Shawn,<br>
<br>
I apologize, this may just be a false flag based on
something Apple changed. <font face="Helvetica, Arial,
sans-serif">From the Apple Developer Discussions:<br>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://discussions.apple.com/thread/4922849?start=0&tstart=0">https://discussions.apple.com/thread/4922849?start=0&tstart=0</a><br>
<br>
</font>--------------------------------------------------------------------------------
<p>I had the same issue since 10.8.3</p>
<p>I used to execute:</p>
<p><span style="font-family: Geneva;">productsign --sign 3rd
Party Mac Developer Installer: <span
style="font-family: Geneva; font-size: 12px;
text-align: -webkit-auto; ">MyCompagny </span><Source>
<Destination> --cert Apple Worldwide Developer
Relations Certification Authority</span></p>
<p>The correct use of productsign is:</p>
<p style="font-family: Helvetica; font-size: medium;
text-align: -webkit-auto; "><span style="font-size: 12px;
font-family: Geneva;"><strong>productsign --sign
Developer ID Installer: MyCompagny <Source>
<Destination><br>
</strong></span></p>
<p style="font-family: Helvetica; font-size: medium;
text-align: -webkit-auto; ">--------------------------------------------------------------------------------<br>
</p>
<p style="font-family: Helvetica; font-size: medium;
text-align: -webkit-auto; ">I hope this helps.<br>
</p>
<p style="font-family: Helvetica; font-size: medium;
text-align: -webkit-auto; "><br>
</p>
<p style="font-family: Helvetica; font-size: medium;
text-align: -webkit-auto; ">Regards,<br>
<br>
Jim Thomas, CSCIP/G<br>
<br>
</p>
<br>
<br>
<div class="moz-cite-prefix">On 5/10/13 9:29 AM, Shawn
Geddis wrote:<br>
</div>
<blockquote
cite="mid:241AF608-AEC0-4D43-A115-1077342AC9B1@me.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div>Jim,</div>
<div><br>
</div>
<div>OS X: About Gatekeeper<span class="Apple-tab-span"
style="white-space:pre"> </span>(OS X Lion, OS X
Mountain Lion)</div>
<div><span class="Apple-tab-span" style="white-space:pre">
</span><a moz-do-not-send="true"
href="http://support.apple.com/kb/HT5290">http://support.apple.com/kb/HT5290</a></div>
<div><br>
</div>
<div><br>
</div>
-Shawn
<div><br>
<div>
<div>On May 10, 2013, at 9:31 AM, Jim Thomas <<a
moz-do-not-send="true"
href="mailto:jim@thursby.com">jim@thursby.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">Shawn,<br>
<br>
I noticed this with our own installers, and in
troubleshooting, found it with yours, too.<br>
<br>
With Gatekeeper set to default, double-clicking the
signed installer pkg results in the following error:<br>
----------------------------------------<br>
"Smart Card Services Update 2.0b2-ML-signed" can't
be installed because it is from an unidentified
developer.<br>
Your security preferences allow installation of only
apps from the Mac App Store and identified
developers.<br>
----------------------------------------<br>
<br>
Any insight would be appreciated.<br>
<br>
Regards,<br>
<br>
Jim Thomas, CSCIP/G<br>
_______________________________________________<br>
SmartcardServices-Users mailing list<br>
<a moz-do-not-send="true"
href="mailto:SmartcardServices-Users@lists.macosforge.org">SmartcardServices-Users@lists.macosforge.org</a><br>
<a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="https://lists.macosforge.org/mailman/listinfo/smartcardservices-users">https://lists.macosforge.org/mailman/listinfo/smartcardservices-users</a><br>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
</div>
</blockquote>
</div>
<br>
</blockquote>
<br>
</body>
</html>