Notarized .pkg validated but fails to install without error

Question

givadis OP

Created Jun ’20

Replies 2

Boosts 0

Participants 2

Hi

I have a .pkg, which I signed successfully:

pkgutil --check-signature /Users/dmeier/Downloads/GiroScan3.pkg 
Package "GiroScan3.pkg":
   Status: signed by a developer certificate issued by Apple for distribution
   Signed with a trusted timestamp on: 2020-06-10 16:09:20 +0000
   Certificate Chain:
    1. Developer ID Installer: David Meier (xxxxxx)

The app itself is also signed and notarized.

But when I download the .pkg from an ftp-server and want to install it, I'll get an error:

"GiroScan3.pkg" can't be opened because Apple can't check it for malicious software

Thanks for help

David

Answered by john daniel in 424074022

You need to notarize only the outermost container. In this case, that would be the package.

Note that the only way to say that you have actually "notarized" it is to successfully download and install it on a pristine machine that has never before seen the app. I recommend a virtual machine.

Boost

Answer 1

john daniel OP

Jun ’20

Accepted Answer

You need to notarize only the outermost container. In this case, that would be the package.

Note that the only way to say that you have actually "notarized" it is to successfully download and install it on a pristine machine that has never before seen the app. I recommend a virtual machine.

0

Answer 2

givadis OP

Jun ’20

This worked, thanks Daniel!

Regards David

0