Em seg., 23 de jun. de 2025 às 11:44, Phil Stone pksmusic@gmail.com escreveu:
Does the binary version for MacOS need to be signed manually? I’m getting "Apple could not verify “Pd-0.56-0test1” is free of malware that may harm your Mac or compromise your privacy.”
Yeah, I got this too, and I love that this doesn't happen to Pd, so I hope it doesn't start with the new 0.56-0 final version :)
On Jun 21, 2025, at 6:11 AM, Miller Puckette via Pd-announce via Pd-list < pd-list@lists.iem.at> wrote:
To Pd-announce:
Pd version 0.56-0test1 is available from https://msp.ucsd.edu/software.htm or (source only) via github: https://github.com/pure-data/pure-data .
cheers Miller
Pd-announce mailing list -- pd-announce@lists.iem.at To unsubscribe send an email to pd-announce-leave@lists.iem.at
pd-list@lists.iem.at - the Pure Data mailinglist
https://lists.iem.at/hyperkitty/list/pd-list@lists.iem.at/message/SABAQYUIZL...
To unsubscribe send an email to pd-list-leave@lists.iem.at mailing list UNSUBSCRIBE and account-management -> https://lists.iem.at/
pd-list@lists.iem.at - the Pure Data mailinglist
https://lists.iem.at/hyperkitty/list/pd-list@lists.iem.at/message/3JFSDKOVIR...
To unsubscribe send an email to pd-list-leave@lists.iem.at mailing list UNSUBSCRIBE and account-management -> https://lists.iem.at/
As IOhannes wrote, if it was a hiccup in the CI build, then FUD is not required. Next builds will likely return to normal.
---
For details, an app can be checked for signature and notarization with various tools. I am refreshing myself on this too. ;)
Check signature:
% codesign -vvv ~/Desktop/Pd-0.56-0test1.app --prepared:/Users/danomatika/Desktop/Pd-0.56-0test1.app/Contents/Frameworks/Tk.framework/Versions/Current/. --validated:/Users/danomatika/Desktop/Pd-0.56-0test1.app/Contents/Frameworks/Tk.framework/Versions/Current/. --prepared:/Users/danomatika/Desktop/Pd-0.56-0test1.app/Contents/Frameworks/Tcl.framework/Versions/Current/. --validated:/Users/danomatika/Desktop/Pd-0.56-0test1.app/Contents/Frameworks/Tcl.framework/Versions/Current/. /Users/danomatika/Desktop/Pd-0.56-0test1.app: valid on disk /Users/danomatika/Desktop/Pd-0.56-0test1.app: satisfies its Designated Requirement
So the build is *signed* ok.
Check notarization:
% stapler validate ~/Desktop/Pd-0.56-0test1.app Processing: /Users/danomatika/Desktop/Pd-0.56-0test1.app Pd-0.56-0test1.app does not have a ticket stapled to it.
Hmmm, notarization failed, hence IOhannes' message.
How an app is treated by Gatekeeper in the OS can be checked too:
% spctl -a -vvv ~/Desktop/Pd-0.56-0test1.app /Users/danomatika/Desktop/Pd-0.56-0test1.app: rejected source=Unnotarized Developer ID origin=Developer ID Application: Institut fuer Elektronische Musik und Akustik der Kunstuniversitaet Graz (85W2432JR3)
This show's the same issue: There is a developer account on the signature but the notarization is not there and cannot be verified. I bet the notarization submission process to Apple by the CI failed or worked *but* the return ticket was not stapled to the app.
On Jun 24, 2025, at 2:35 AM, Alexandre Torres Porres porres@gmail.com wrote:
Yeah, I got this too, and I love that this doesn't happen to Pd, so I hope it doesn't start with the new 0.56-0 final version :)
-------- Dan Wilcox danomatika.com http://danomatika.com/ robotcowboy.com http://robotcowboy.com/