From: chrisridd@mac.com   
      
   On 16/02/2025 16:00, Francois LE COAT wrote:   
   > In the current situation I have a lot of difficulties with the binaries.   
   > Can you test *ARAnyM miniPack*    
   > I hope that it runs correctly, but I'm not sure at all. Because the   
   > binary was downloaded on GitHub, and there's issues with signature...   
      
   It fails to open because it isn't notarised. The alert looks like:   
      
   "MacAranym" Not Opened   
      
   Apple could not verify "MacAranym" is free of malware that may harm your   
   Mac or compromise your privacy.   
      
   [Done] [Move to Bin]   
      
   If you hit Done, you can go to System Settings > Privacy and Security >   
   it has a button at the bottom letting you "Open Anyway".   
      
   It looks like it is signed OK, but the notarisation hasn't been attached   
   ("stapled" in codesign terminology) to the app. Here's the output of   
   codesign against MacAranym.app and Sigil.app (which is a correctly   
   notarised and opensource app)   
      
   $ codesign -dvvv MacAranym.app   
   Executable=/Users/cjr/Downloads/miniPack   
   2/MacAranym.app/Contents/MacOS/MacAranym   
   Identifier=org.aranym.MacAranym.aranym   
   Format=app bundle with Mach-O universal (x86_64 arm64)   
   CodeDirectory v=20500 size=29383 flags=0x10000(runtime) hashes=907+7   
   location=embedded   
   Hash type=sha256 size=32   
   CandidateCDHash sha256=2a4c13f1f6d1fa12f51b2623de564e41865de240   
   CandidateCDHashFull   
   sha256=2a4c13f1f6d1fa12f51b2623de564e41865de2409cf06649a29bac2c662a8717   
   Hash choices=sha256   
   CMSDigest=2a4c13f1f6d1fa12f51b2623de564e41865de2409cf06649a29bac2c662a8717   
   CMSDigestType=2   
   CDHash=2a4c13f1f6d1fa12f51b2623de564e41865de240   
   Signature size=8977   
   Authority=Developer ID Application: Philipp Donze (P8CC95REUG)   
   Authority=Developer ID Certification Authority   
   Authority=Apple Root CA   
   Timestamp=17 Jan 2025 at 22:40:46   
   Info.plist entries=27   
   TeamIdentifier=P8CC95REUG   
   Runtime Version=14.5.0   
   Sealed Resources version=2 rules=13 files=7   
   Internal requirements count=1 size=220   
      
   $ codesign -dvvv /Applications/Sigil.app   
   Executable=/Applications/Sigil.app/Contents/MacOS/Sigil   
   Identifier=com.sigil-ebook.Sigil.app   
   Format=app bundle with Mach-O thin (arm64)   
   CodeDirectory v=20500 size=67717 flags=0x10000(runtime) hashes=2105+7   
   location=embedded   
   Hash type=sha256 size=32   
   CandidateCDHash sha256=12161a2aa64d527d73f95367a1788ae6bdbb44f2   
   CandidateCDHashFull   
   sha256=12161a2aa64d527d73f95367a1788ae6bdbb44f2bc4c59b3a8a466575f913717   
   Hash choices=sha256   
   CMSDigest=12161a2aa64d527d73f95367a1788ae6bdbb44f2bc4c59b3a8a466575f913717   
   CMSDigestType=2   
   CDHash=12161a2aa64d527d73f95367a1788ae6bdbb44f2   
   Signature size=8979   
   Authority=Developer ID Application: Kevin Hendricks (2SMCVQU3CJ)   
   Authority=Developer ID Certification Authority   
   Authority=Apple Root CA   
   Timestamp=31 Jan 2025 at 16:00:58   
   Notarization Ticket=stapled   
   Info.plist entries=17   
   TeamIdentifier=2SMCVQU3CJ   
   Runtime Version=14.5.0   
   Sealed Resources version=2 rules=13 files=374   
   Internal requirements count=1 size=188   
      
      
   --   
   Chris   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)