Re: Code signing validation

2008-10-28 Thread David Riggle
I just pass the -o kill flags to codesign. That way if the app has been tampered with it won't launch. Make sure you are using Xcode 3.1 or later so the codesigning is done after the stripping. Dave ___ Cocoa-dev mailing list

. Re: Code signing validation

2008-10-28 Thread [EMAIL PROTECTED]
I am aware of the -o kill flag but I am not sure that killing my code stone dead is what I require in this case. Any resource change, even a removed localisation would then be fatal. For me a string representation of the code signing is more of a sanity check. I just pass the -o kill flags

Re: Code signing validation

2008-10-28 Thread Conor
even a removed localisation would then be fatal Just a clarification: removing a localization does not affect the signature (http://atomic-bird.com/blog/2007/11/leopard-code-signing-questions-and-answers ). Regards, Conor ___ Cocoa-dev mailing

Re: Code signing validation

2008-10-28 Thread Jean-Daniel Dupas
You may fill a feature request to ask Apple to publish this API that is part of the Security Framework: http://www.opensource.apple.com/darwinsource/10.5.5/libsecurity_codesigning-33803/lib/SecStaticCode.h Le 28 oct. 08 à 10:36, [EMAIL PROTECTED] a écrit : Hello list Having implemented