<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Shawn,<br>
    <br>
    Thanks for that clarification.&nbsp; <br>
    <br>
    Regards,<br>
    <br>
    Jim Thomas, CSCIP/G<br>
    <br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 5/10/13 12:23 PM, Shawn Geddis
      wrote:<br>
    </div>
    <blockquote cite="mid:54955238-324D-4078-89E1-89E3A56E156C@me.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=ISO-8859-1">
      <div>Jim,</div>
      <div><br>
      </div>
      <div>The Installer was signed, but not using a DeveloperID issued
        Certificate. &nbsp;As noted with the installers and the blog entry:</div>
      <div>
        <blockquote style="margin: 0 0 0 40px; border: none; padding:
          0px;">
          <div>
            <p style="font-family: 'Lucida Grande', Verdana, Arial,
              Helvetica, sans-serif; font-size: 13px; background-color:
              rgb(255, 255, 255); "><strong>Installers</strong></p>
            <p style="font-family: 'Lucida Grande', Verdana, Arial,
              Helvetica, sans-serif; font-size: 13px; background-color:
              rgb(255, 255, 255); ">The Installers have been digitally
              signed, but it is possible you may not have the
              intermediate CA certificate on your system yet. &nbsp;If you do
              not have it, you can pull it down from&nbsp;<a
                moz-do-not-send="true"
                href="https://www.apple.com/certificateauthority/"
                target="_self" style="font-size: 11px; font-weight:
                bold; color: rgb(0, 0, 204); text-decoration: none;
                border-bottom-style: none; ">Apple's Root Certification
                Authority</a>&nbsp;site with the specific Intermediate CA
              certificate you need found --&gt;&nbsp;<a
                moz-do-not-send="true"
                href="http://developer.apple.com/certificationauthority/AppleWWDRCA.cer"
                target="_self" style="font-size: 11px; font-weight:
                bold; color: rgb(0, 0, 204); text-decoration: none;
                border-bottom-style: none; ">HERE</a>&nbsp;&lt;--.</p>
            <p style="font-family: 'Lucida Grande', Verdana, Arial,
              Helvetica, sans-serif; font-size: 13px; background-color:
              rgb(255, 255, 255); position: static; z-index: auto; ">The
              installers are located on the Project's Installers page
              which you can get to --&gt;&nbsp;<a moz-do-not-send="true"
                title="HERE"
                href="http://smartcardservices.macosforge.org/trac/wiki/installers"
                target="_self" style="font-size: 11px; font-weight:
                bold; color: rgb(0, 0, 204); text-decoration: none;
                border-bottom-style: none; ">HERE</a>&nbsp;&lt;-- as well as
              clicking on the&nbsp;<strong>Installers</strong>&nbsp;link on the
              left side of this page.</p>
          </div>
        </blockquote>
      </div>
      <div><br>
      </div>
      <div>In your case, the reason I included the reference to the
        Gatekeeper KBase, is that you and others would need to allow
        this from "Anywhere" in System Preference or perform the manual
        override for the installer. &nbsp;This would not be necessary if the
        MacOSForge Projects were issued DeveloperIDs for code signing,
        but that has not yet been the case. &nbsp;Until then, the signature
        is providing integrity assurance that it came from me, but not
        under the official DeveloperID program today.</div>
      <div><br>
      </div>
      <div>-Shawn</div>
      <div><br>
      </div>
      <br>
      <div>
        <div>On May 10, 2013, at 12:31 PM, Jim Thomas &lt;<a
            moz-do-not-send="true" href="mailto:jim@thursby.com">jim@thursby.com</a>&gt;
          wrote:</div>
        <blockquote type="cite">
          <meta content="text/html; charset=ISO-8859-1"
            http-equiv="Content-Type">
          <div bgcolor="#FFFFFF" text="#000000"> Shawn,<br>
            <br>
            I apologize, this may just be a false flag based on
            something Apple changed.&nbsp; <font face="Helvetica, Arial,
              sans-serif">From the Apple Developer Discussions:<br>
              <br>
              <a moz-do-not-send="true" class="moz-txt-link-freetext"
                href="https://discussions.apple.com/thread/4922849?start=0&amp;tstart=0">https://discussions.apple.com/thread/4922849?start=0&amp;tstart=0</a><br>
              <br>
            </font>--------------------------------------------------------------------------------


            <p>I had the same issue since 10.8.3</p>
            <p>I used to execute:</p>
            <p><span style="font-family: Geneva;">productsign --sign 3rd
                Party Mac Developer Installer: <span
                  style="font-family: Geneva; font-size: 12px;
                  text-align: -webkit-auto; ">MyCompagny </span>&lt;Source&gt;

                &lt;Destination&gt; --cert Apple Worldwide Developer
                Relations Certification Authority</span></p>
            <p>The correct use of productsign is:</p>
            <p style="font-family: Helvetica; font-size: medium;
              text-align: -webkit-auto; "><span style="font-size: 12px;
                font-family: Geneva;"><strong>productsign --sign
                  Developer ID Installer: MyCompagny &lt;Source&gt;
                  &lt;Destination&gt;<br>
                </strong></span></p>
            <p style="font-family: Helvetica; font-size: medium;
              text-align: -webkit-auto; ">--------------------------------------------------------------------------------<br>
            </p>
            <p style="font-family: Helvetica; font-size: medium;
              text-align: -webkit-auto; ">I hope this helps.<br>
            </p>
            <p style="font-family: Helvetica; font-size: medium;
              text-align: -webkit-auto; "><br>
            </p>
            <p style="font-family: Helvetica; font-size: medium;
              text-align: -webkit-auto; ">Regards,<br>
              <br>
              Jim Thomas, CSCIP/G<br>
              <br>
            </p>
            <br>
            <br>
            <div class="moz-cite-prefix">On 5/10/13 9:29 AM, Shawn
              Geddis wrote:<br>
            </div>
            <blockquote
              cite="mid:241AF608-AEC0-4D43-A115-1077342AC9B1@me.com"
              type="cite">
              <meta http-equiv="Content-Type" content="text/html;
                charset=ISO-8859-1">
              <div>Jim,</div>
              <div><br>
              </div>
              <div>OS X: About Gatekeeper<span class="Apple-tab-span"
                  style="white-space:pre"> </span>(OS X Lion, OS X
                Mountain Lion)</div>
              <div><span class="Apple-tab-span" style="white-space:pre">
                </span><a moz-do-not-send="true"
                  href="http://support.apple.com/kb/HT5290">http://support.apple.com/kb/HT5290</a></div>
              <div><br>
              </div>
              <div><br>
              </div>
              -Shawn
              <div><br>
                <div>
                  <div>On May 10, 2013, at 9:31 AM, Jim Thomas &lt;<a
                      moz-do-not-send="true"
                      href="mailto:jim@thursby.com">jim@thursby.com</a>&gt;

                    wrote:</div>
                  <br class="Apple-interchange-newline">
                  <blockquote type="cite">Shawn,<br>
                    <br>
                    I noticed this with our own installers, and in
                    troubleshooting, found it with yours, too.<br>
                    <br>
                    With Gatekeeper set to default, double-clicking the
                    signed installer pkg results in the following error:<br>
                    ----------------------------------------<br>
                    "Smart Card Services Update 2.0b2-ML-signed" can't
                    be installed because it is from an unidentified
                    developer.<br>
                    Your security preferences allow installation of only
                    apps from the Mac App Store and identified
                    developers.<br>
                    ----------------------------------------<br>
                    <br>
                    Any insight would be appreciated.<br>
                    <br>
                    Regards,<br>
                    <br>
                    Jim Thomas, CSCIP/G<br>
                    _______________________________________________<br>
                    SmartcardServices-Users mailing list<br>
                    <a moz-do-not-send="true"
                      href="mailto:SmartcardServices-Users@lists.macosforge.org">SmartcardServices-Users@lists.macosforge.org</a><br>
                    <a moz-do-not-send="true"
                      class="moz-txt-link-freetext"
href="https://lists.macosforge.org/mailman/listinfo/smartcardservices-users">https://lists.macosforge.org/mailman/listinfo/smartcardservices-users</a><br>
                  </blockquote>
                </div>
                <br>
              </div>
            </blockquote>
            <br>
          </div>
        </blockquote>
      </div>
      <br>
    </blockquote>
    <br>
  </body>
</html>