valid certificate reported to be expired by `pkgtutil`

pkgutil --check-signature ***

output:

Status: signed by a certificate that has since expired
Certificate Chain:
    1. xxxxx
       Expires: 2024-06-01 22:33:34 +0000

Please post the full output of pkgutil, not just that snippet.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

there is not much beyond the snippet:

pkgutil --check-signature /xxxx/Glean-1.0.0-universal.pkg

Package "***-1.0.0-universal.pkg": Status: signed by a certificate that has since expired Certificate Chain: 1. 3rd Party Mac Developer Installer: XXXX Expires: 2024-06-01 22:33:34 +0000 SHA256 Fingerprint: CODES...

If you use a code block for Terminal transcripts, they’ll be a lot easier to read. See tip 5 here.

there is not much beyond the snippet:

Au contraire, this is critical:

3rd Party Mac Developer Installer: XXXX

It indicates that this an installer for a Mac App Store app. I’d expect such a signature to look like this:

% pkgutil --check-signature QProcessDock.pkg 
Package "QProcessDock.pkg":
   Status: signed by a developer certificate issued by Apple (Development)
   Certificate Chain:
    1. 3rd Party Mac Developer Installer: Quinn Quinn (SKMME9E2Y8)
       Expires: 2023-09-13 08:59:38 +0000
       SHA256 Fingerprint:
           58 79 33 36 8B 34 38 BA 21 B2 BE 73 05 B2 2B 4E EC 03 03 49 FE E5 
           6C 2B 02 F8 D1 5A E4 EB 56 D7
       ------------------------------------------------------------------------
    2. Apple Worldwide Developer Relations Certification Authority
       Expires: 2030-02-20 00:00:00 +0000
       SHA256 Fingerprint:
           DC F2 18 78 C7 7F 41 98 E4 B4 61 4F 03 D6 96 D8 9C 66 C6 60 08 D4 
           24 4E 1B 99 16 1A AC 91 60 1F
       ------------------------------------------------------------------------
    3. Apple Root CA
       Expires: 2035-02-09 21:40:36 +0000
       SHA256 Fingerprint:
           B0 B1 73 0E CB C7 FF 45 05 14 2C 49 F1 29 5E 6E DA 6B CA ED 7E 2C 
           68 C5 BE 91 B5 A1 10 01 F0 24

Do you see certificate 2 or 3 in your output? If not, it’s possible that your WWDR intermediate has expired.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

valid certificate reported to be expired by `pkgtutil`
 
 
Q