<div dir="ltr">Filipe,<div><br></div><div>the current script just outputs the result from the other validation rather than exiting.</div><div><br></div><div>however - if you fancy figuring out how to parse the outputs and exit appropriately, then I'm sure nobody would object. My bash skills are not up to the job.</div><div><br></div><div><br></div><div>this is the current output I see (success on codesign, failure on spctl)</div><div><br></div><div><div>VLC.app: valid on disk</div><div>VLC.app: satisfies its Designated Requirement</div><div>[codesign] Validating spctl</div><div>VLC.app: rejected</div><div><?xml version="1.0" encoding="UTF-8"?></div><div><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "<a href="http://www.apple.com/DTDs/PropertyList-1.0.dtd">http://www.apple.com/DTDs/PropertyList-1.0.dtd</a>"></div><div><plist version="1.0"></div><div><dict></div><div><span class="" style="white-space:pre"> </span><key>assessment:authority</key></div><div><span class="" style="white-space:pre"> </span><dict></div><div><span class="" style="white-space:pre"> </span><key>assessment:authority:source</key></div><div><span class="" style="white-space:pre"> </span><string>obsolete resource envelope</string></div><div><span class="" style="white-space:pre"> </span><key>assessment:authority:weak</key></div><div><span class="" style="white-space:pre"> </span><true/></div><div><span class="" style="white-space:pre"> </span></dict></div><div><span class="" style="white-space:pre"> </span><key>assessment:cserror</key></div><div><span class="" style="white-space:pre"> </span><integer>-67003</integer></div><div><span class="" style="white-space:pre"> </span><key>assessment:remote</key></div><div><span class="" style="white-space:pre"> </span><true/></div><div><span class="" style="white-space:pre"> </span><key>assessment:verdict</key></div><div><span class="" style="white-space:pre"> </span><false/></div><div></dict></div><div></plist></div></div><div><br></div><div><br></div><div>cheers,</div><div><br>Rob</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 3 November 2015 at 18:00, Filipe Cabecinhas <span dir="ltr"><<a href="mailto:filcab@filcab.net" target="_blank">filcab@filcab.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Probably codesign.sh should exit with a non-zero exit code if spctl fails.<div><br></div><div> Filipe<br><br>On Tuesday, 3 November 2015, Rob Jonson <<a href="mailto:rob@hobbyistsoftware.com" target="_blank">rob@hobbyistsoftware.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Adds a test with spctl as described here:</div><div><a href="https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-DontLinkElementID5" target="_blank">https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-DontLinkElementID5</a></div><div>---</div><div> extras/package/macosx/codesign.sh | 2 ++</div><div> 1 file changed, 2 insertions(+)</div><div><br></div><div>diff --git a/extras/package/macosx/codesign.sh b/extras/package/macosx/codesign.sh</div><div>index 74a9c9d..451d3dc 100755</div><div>--- a/extras/package/macosx/codesign.sh</div><div>+++ b/extras/package/macosx/codesign.sh</div><div>@@ -194,5 +194,7 @@ codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework/Versions/Cur</div><div> info "Validating complete bundle"</div><div> codesign --verify --deep --verbose=4 VLC.app</div><div> </div><div>+info "Testing with spctl (all assessments should be true)"</div><div>+spctl --assess --verbose=4 --raw --type execute VLC.app</div><div> </div><div> info "Validation complete"</div><span class="HOEnZb"><font color="#888888"><div>-- </div><div>2.4.9 (Apple Git-60)</div><div><br></div><div><br></div>
</font></span></div>
</blockquote></div>
<br>_______________________________________________<br>
vlc-devel mailing list<br>
To unsubscribe or modify your subscription options:<br>
<a href="https://mailman.videolan.org/listinfo/vlc-devel" rel="noreferrer" target="_blank">https://mailman.videolan.org/listinfo/vlc-devel</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><br><br><br><br><br>Hobbyist Software is a trading name of Hobbyist Software Limited. Registered office 12 Fraley Rd, Bristol, BS93BS. Registered in England. Company no:7876492</div></div>
</div>