| Summary: | Missing code signature in version 3.5.9 | ||
|---|---|---|---|
| Product: | [Applications] kstars | Reporter: | hello |
| Component: | general | Assignee: | Rob <rlancaste> |
| Status: | RESOLVED NOT A BUG | ||
| Severity: | major | ||
| Priority: | NOR | ||
| Version: | 3.5.9 | ||
| Target Milestone: | --- | ||
| Platform: | macOS (DMG) | ||
| OS: | macOS | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
If you would like a version of KStars with a code signature, you can get the builds produced by craft on a daily basis. https://binary-factory.kde.org/view/MacOS/job/KStars_Release_macos/ I have been working hard to get craft to build Kstars automatically instead of the builds I have been doing on my own machine for the last several years since I ported KStars to make it work on a Mac. They do somehow put a code signature on it. Unfortunately, those builds do not include the QuickStart guide that I made, nor do they have the documentation that I have included for years with the official builds. I may get craft to do that in the future, in which case we could just use craft to build it instead of me having to do it myself. But as of now, I think those things are really important. As for my build having a code signature, I believe in order for me to be able to do that, I would need to pay Apple $100 a year for the privilege. It isn't really a lot of money in the grand scheme of things, but that just seems wrong to me for us to invest huge amounts of time to volunteer to create free open source software and then to have to pay your own money on a yearly basis to code sign it. And then there is the additional issue that you are code signing code that was written by both you and others, so can you really guarantee the code written by the other people? That is like taking responsibility for it. So I am not sure that this would be the best plan. If you have a solution to these issues, I would be glad to hear about it. In the QuickStart guide, I have instructions about how to handle the fact that there is no code signature since it is open source software and it does work well. Thanks, Rob |
SUMMARY *** The latest MacOS version (3.5.9) has no code signature *** STEPS TO REPRODUCE codesign -dv --verbose=4 /Applications/KStars.app > /Applications/KStars.app: code object is not signed at all EXPECTED RESULT K Desktop Environment e.V. (5433B4KXM8) OBSERVED RESULT FOUND (null) SOFTWARE/OS VERSIONS macOS: catalina ADDITIONAL INFORMATION