From: lecoat@atari.org   
      
   Hi,   
      
   Chris Ridd writes:   
   > Francois LE COAT wrote:   
   >> In the current situation I have a lot of difficulties with the binaries.   
   >> Can you test *ARAnyM miniPack*    
   >> I hope that it runs correctly, but I'm not sure at all. Because the   
   >> binary was downloaded on GitHub, and there's issues with signature...   
   >    
   > It fails to open because it isn't notarised. The alert looks like:   
   >    
   > "MacAranym" Not Opened   
   >    
   > Apple could not verify "MacAranym" is free of malware that may harm your    
   > Mac or compromise your privacy.   
   >    
   > [Done] [Move to Bin]   
   >    
   > If you hit Done, you can go to System Settings > Privacy and Security >    
   > it has a button at the bottom letting you "Open Anyway".   
   >    
   > It looks like it is signed OK, but the notarisation hasn't been attached    
   > ("stapled" in codesign terminology) to the app. Here's the output of    
   > codesign against MacAranym.app and Sigil.app (which is a correctly    
   > notarised and opensource app)   
   >    
   > $ codesign -dvvv MacAranym.app   
   > Executable=/Users/cjr/Downloads/miniPack    
   > 2/MacAranym.app/Contents/MacOS/MacAranym   
   > Identifier=org.aranym.MacAranym.aranym   
   > Format=app bundle with Mach-O universal (x86_64 arm64)   
   > CodeDirectory v=20500 size=29383 flags=0x10000(runtime) hashes=907+7    
   > location=embedded   
   > Hash type=sha256 size=32   
   > CandidateCDHash sha256=2a4c13f1f6d1fa12f51b2623de564e41865de240   
   > CandidateCDHashFull    
   > sha256=2a4c13f1f6d1fa12f51b2623de564e41865de2409cf06649a29bac2c662a8717   
   > Hash choices=sha256   
   > CMSDigest=2a4c13f1f6d1fa12f51b2623de564e41865de2409cf06649a29bac2c662a8717   
   > CMSDigestType=2   
   > CDHash=2a4c13f1f6d1fa12f51b2623de564e41865de240   
   > Signature size=8977   
   > Authority=Developer ID Application: Philipp Donze (P8CC95REUG)   
   > Authority=Developer ID Certification Authority   
   > Authority=Apple Root CA   
   > Timestamp=17 Jan 2025 at 22:40:46   
   > Info.plist entries=27   
   > TeamIdentifier=P8CC95REUG   
   > Runtime Version=14.5.0   
   > Sealed Resources version=2 rules=13 files=7   
   > Internal requirements count=1 size=220   
   >    
   > $ codesign -dvvv /Applications/Sigil.app   
   > Executable=/Applications/Sigil.app/Contents/MacOS/Sigil   
   > Identifier=com.sigil-ebook.Sigil.app   
   > Format=app bundle with Mach-O thin (arm64)   
   > CodeDirectory v=20500 size=67717 flags=0x10000(runtime) hashes=2105+7    
   > location=embedded   
   > Hash type=sha256 size=32   
   > CandidateCDHash sha256=12161a2aa64d527d73f95367a1788ae6bdbb44f2   
   > CandidateCDHashFull    
   > sha256=12161a2aa64d527d73f95367a1788ae6bdbb44f2bc4c59b3a8a466575f913717   
   > Hash choices=sha256   
   > CMSDigest=12161a2aa64d527d73f95367a1788ae6bdbb44f2bc4c59b3a8a466575f913717   
   > CMSDigestType=2   
   > CDHash=12161a2aa64d527d73f95367a1788ae6bdbb44f2   
   > Signature size=8979   
   > Authority=Developer ID Application: Kevin Hendricks (2SMCVQU3CJ)   
   > Authority=Developer ID Certification Authority   
   > Authority=Apple Root CA   
   > Timestamp=31 Jan 2025 at 16:00:58   
   > Notarization Ticket=stapled   
   > Info.plist entries=17   
   > TeamIdentifier=2SMCVQU3CJ   
   > Runtime Version=14.5.0   
   > Sealed Resources version=2 rules=13 files=374   
   > Internal requirements count=1 size=188   
      
   Well, GitHub is a Microsoft technology. They're not inclusive, nor   
   friendly with other hardware/software, noticeably with Apple... And   
   I'm not speaking about free software or ATARI computers, indeed!   
      
   Regards,   
      
   --    
   François LE COAT   
   Author of Eureka 2.12 (2D Graph Describer, 3D Modeller)   
   https://eureka.atari.org/   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)