The app extracted from krita-4.0.3.dmg will not launch, with the following error: “krita.app” is damaged and can’t be opened. Two downloads and three attempts to extract with no difference. 4.0.2 seems to work. MacOS 10.13.4; MacBook Pro 13" early 2015
I suspect your download is corrupted after all. I just downloaded the dmg and it opened fine. What is the md5sum of the downloaded dmg? It should be 6669445ecf0f0e30b261d2be16a150f3 You can use the md5 command in Terminal.app to calculate the checksum.
Created attachment 112615 [details] attachment-14688-0.html Sorry. I just d/l the dmg from https://krita.org/en/download/krita-desktop/ <https://krita.org/en/download/krita-desktop/> again; it throws the same error (see the attachment), and checking the checksum with the term md5 tool, I get the same checksum you wrote below. From Terminal: tony-2:~ tlavely$ md5 /Users/tlavely/Documents/faux\ desktop/krita-4.0.3.dmg MD5 (/Users/tlavely/Documents/faux desktop/krita-4.0.3.dmg) = 6669445ecf0f0e30b261d2be16a150f3 tony-2:~ tlavely$ What’s funny about my set-up? Thanks, tony > On May 13, 2018, at 3:03 AM, Boudewijn Rempt <bugzilla_noreply@kde.org> wrote: > > https://bugs.kde.org/show_bug.cgi?id=394188 > > Boudewijn Rempt <boud@valdyas.org> changed: > > What |Removed |Added > ---------------------------------------------------------------------------- > CC| |boud@valdyas.org > Status|UNCONFIRMED |NEEDSINFO > Resolution|--- |WAITINGFORINFO > > --- Comment #1 from Boudewijn Rempt <boud@valdyas.org> --- > I suspect your download is corrupted after all. I just downloaded the dmg and > it opened fine. > > What is the md5sum of the downloaded dmg? It should be > 6669445ecf0f0e30b261d2be16a150f3 You can use the md5 command in Terminal.app to > calculate the checksum. > > -- > You are receiving this mail because: > You reported the bug. tony lavely twitter: @tlavely Blog http://tonylavely.com/ At Amazon: amazon.com/author/tonylavely
Created attachment 112616 [details] Screen Shot 2018-05-13 at 8.49.32 AM.png
I had the same error, but successfully installed at 4th time, when I get the file with wget. If I download it with FireFox, I got the same error with you even though the md5 checksum is same. $ md5 krita-4.0.3.dmg krita-4.0.3-broken.dmg MD5 (krita-4.0.3.dmg) = 6669445ecf0f0e30b261d2be16a150f3 MD5 (krita-4.0.3-broken.dmg) = 6669445ecf0f0e30b261d2be16a150f3 $ ls -l@ krita-4.0.3.dmg | grep com com.apple.diskimages.recentcksum 83 com.apple.lastuseddate#PS 16 com.apple.metadata:kMDItemWhereFroms 118 $ ls -l@ krita-4.0.3-broken.dmg | grep com com.apple.diskimages.fsck 20 com.apple.diskimages.recentcksum 83 com.apple.metadata:kMDItemWhereFroms 119 com.apple.quarantine 82
As I showed in my previous post, it looks something is different in metadata. I installed wget command from MacPort, but if you do not have it yet , try this commands to remove metadata. (As all commands are in /bin or /usr/bin that means there is no need to install something. There should be a better way, but I don't know other ways...) $ mkdir temp $ mv ~/Download/krita-4.0.3.dmg temp/krita-4.0.3-broken.dmg $ cd temp $ COPYFILE_DISABLE=1 tar cvf temp.tar krita-4.0.3-broken.dmg krita-4.0.3-broken.dmg $ mkdir tmp $ tar xvfC temp.tar tmp $ mv tmp/krita-4.0.3-broken.dmg krita-4.0.3.dmg x krita-4.0.3-broken.dmg $ rm temp.tar $ rmdir tmp Then, I hope you can use temp/krita-4.0.3.dmg
Created attachment 112629 [details] attachment-26192-0.html Ok, I couldn’t run your suggestion, since I don’t have the developer’s tools, but I d/l wget and installed it, flailed around for a few minutes and got it to work. The resulting file created a working version of 4.0.3, so thank you very much! Before that, I tried not only Firefox but also Tor and Chrome browsers to d/l with the same error as with Firefox, so something needs fixed somewhere. But not me. Thanks again! > On May 13, 2018, at 10:33 AM, <bugzilla_noreply@kde.org> <bugzilla_noreply@kde.org> wrote: > > https://bugs.kde.org/show_bug.cgi?id=394188 > > --- Comment #5 from a246246_246-kde@yahoo.co.jp --- > As I showed in my previous post, it looks something is different in metadata. > I installed wget command from MacPort, but if you do not have it yet , try this > commands to remove metadata. (As all commands are in /bin or /usr/bin that > means there is no need to install something. There should be a better way, but > I don't know other ways...) > > $ mkdir temp > $ mv ~/Download/krita-4.0.3.dmg temp/krita-4.0.3-broken.dmg > $ cd temp > $ COPYFILE_DISABLE=1 tar cvf temp.tar krita-4.0.3-broken.dmg > krita-4.0.3-broken.dmg > $ mkdir tmp > $ tar xvfC temp.tar tmp > $ mv tmp/krita-4.0.3-broken.dmg krita-4.0.3.dmg > x krita-4.0.3-broken.dmg > $ rm temp.tar > $ rmdir tmp > > Then, I hope you can use temp/krita-4.0.3.dmg > > -- > You are receiving this mail because: > You reported the bug. tony lavely twitter: @tlavely Blog http://tonylavely.com/ At Amazon: amazon.com/author/tonylavely
Okay, with the help from someone on irc, I've been able to reproduce this issue. The problem seems to be that running krita.app generates some cached compiled files from scripted components inside the app bundle. Those aren't signed, and at that point, the signing system thinks that the app bundle is compromised.
Git commit 4b7bf8edbddf30614d6bdee41f68b7b9750586fd by Boudewijn Rempt. Committed on 14/05/2018 at 08:16. Pushed by rempt into branch 'master'. Disable QtQuick on macOS The touch docker isn't that awesome on systems without a touch screen and running the qml plugin saves cached compiled files in the app bundle and that breaks signing. So disable this until I've found out how to make Qt Quick on macOS save its generated files in the user's home folder. M +2 -1 CMakeLists.txt M +1 -1 libs/CMakeLists.txt M +1 -1 plugins/dockers/CMakeLists.txt https://commits.kde.org/krita/4b7bf8edbddf30614d6bdee41f68b7b9750586fd
This version should work: https://download.kde.org/stable/krita/4.0.3/krita-4.0.3.1.dmg
Created attachment 112641 [details] attachment-31911-0.html With only a brief test, yes, it opens fine. Thanks again! > On May 14, 2018, at 4:37 AM, Boudewijn Rempt <bugzilla_noreply@kde.org> wrote: > > https://bugs.kde.org/show_bug.cgi?id=394188 > > Boudewijn Rempt <boud@valdyas.org> changed: > > What |Removed |Added > ---------------------------------------------------------------------------- > Resolution|--- |FIXED > Status|CONFIRMED |RESOLVED > > --- Comment #9 from Boudewijn Rempt <boud@valdyas.org> --- > This version should work: > > https://download.kde.org/stable/krita/4.0.3/krita-4.0.3.1.dmg > > -- > You are receiving this mail because: > You reported the bug. tony lavely twitter: @tlavely Blog http://tonylavely.com/ At Amazon: amazon.com/author/tonylavely
Git commit bffb6f70f66760c65c822635d25013d67dab16cf by Boudewijn Rempt. Committed on 16/05/2018 at 18:19. Pushed by rempt into branch 'krita/4.0'. Disable QtQuick on macOS The touch docker isn't that awesome on systems without a touch screen and running the qml plugin saves cached compiled files in the app bundle and that breaks signing. So disable this until I've found out how to make Qt Quick on macOS save its generated files in the user's home folder. (cherry picked from commit 4b7bf8edbddf30614d6bdee41f68b7b9750586fd) M +2 -1 CMakeLists.txt M +1 -1 libs/CMakeLists.txt M +1 -1 plugins/dockers/CMakeLists.txt https://commits.kde.org/krita/bffb6f70f66760c65c822635d25013d67dab16cf