Samstag, 31. Dezember 2011

Don't sign everything

Today I found an interesting fact. In OSX you have to sign apps otherwise a popup will get on your nerves. So users look for a workaround and sign apps manually. Does that really make sense if users start doing it with every app they would like to try?

It's actually pretty easy.

Check an application with:

codesign --verify --verbose /Applications/myapp.app

If this states that the certificate is invalid, you can use:

codesign -s [name of the certificate] -f /Applications/myapp.app

It requires a special certificate for signing code.
(See Certificate administration)

Start the application with the admin account.

Keine Kommentare:

Kommentar veröffentlichen