From: Jocelyn Turcotte <jturcotte@woboq.com>
Date: Fri, 22 Jan 2016 15:54:04 +0000 (+0100)
Subject: Do a codesign --verify before running spctl
X-Git-Tag: archive/raspbian/3.16.7-1_deb13u1+rpi1~1^2~1254^2~41
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=6096a836a42d7f85065e4a5204d17f911b212d1b;p=nextcloud-desktop.git

Do a codesign --verify before running spctl

codesign is less strict than spctl and gives more output.
codesign -d alone doesn't verify but only prints.
---

diff --git a/admin/osx/sign_app.sh b/admin/osx/sign_app.sh
index b60ec6176..e495fe105 100755
--- a/admin/osx/sign_app.sh
+++ b/admin/osx/sign_app.sh
@@ -9,8 +9,9 @@ team_identifier="$3"
 codesign -s "$identity" --force --preserve-metadata=entitlements --verbose=4 --deep "$src_app"
 
 # Verify the signature
-spctl -a -t exec -vv $src_app
 codesign -dv $src_app
+codesign --verify -v $src_app
+spctl -a -t exec -vv $src_app
 
 # Validate that the key used for signing the binary matches the expected TeamIdentifier
 # needed to pass the SocketApi through the sandbox