macOS: FMW can't be opened because it is from an unidentified developer

[cmurf]

FedoraMediaWriter-osx-4.1.1-rebuilt.dmg on macOS 10.13.4

Double click dmg, drag FMW from window to /Applications and then double click and I receive the dialog shown by attached screenshot.

[cmurf]

This happens with 4.1.1 and 4.1.1 "rebuilt".

And older 4.1.0 I had installed back when the system had macOS 10.12 still launches under this system upgraded to 10.13.4. However if I remove that 4.1.0 version, and download a new copy of 410 and copy over and launch I get this same message. So somehow the old copy works, the new copy doesn't, like there's some security handling change on 10.13.4 for new apps, where old apps are exempt.

I also tried sudo spctl --reset-default and rebooted but still the same error message.

[alick]

Sounds similar to the case on Android where you need to toggle to "allow installation of apps from unknown sources" if you ever need to install from outside the app/play store. You might want to make an exception to Mac OS X's security preferences to open the dmg downloaded from github.

[DannyThomas]

Double click dmg, drag FMW from window to /Applications and then double click
and I receive the dialog shown by attached screenshot.
This shouldn't happen for products from registered developers,
but I have quite a few utilities from small developers where it happens.

You need to hold the control key down while double-clicking,
and a similar dialog will appear, but with an "Open" button
https://support.apple.com/kb/PH25088?locale=en_US

[cmurf]

I think this is an OK work around for testing purposes, but non-testers should have access to signed binaries. FMW from getfedora.org used to be signed, but I just downloaded 4.1.1 from getfedora.org and I get the same unidentified developer warning.
https://getfedora.org/en/workstation/download/
https://getfedora.org/fmw/FedoraMediaWriter-osx-4.1.1.dmg

I checked the Windows version at the same page, and it is signed by Red Hat Inc.
https://getfedora.org/fmw/FedoraMediaWriter-win32-4.1.1.exe

[MartinBriza]

I updated my Mac this week and I'm planning to see what I can do about this. Probably during the weekend.
However, my Apple developer account has expired so don't expect miracles. I'll try to at least see if all the binaries are signed right or if something changed on the Apple side.

[cmurf]

https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2GAXRLIJSO7Z5XUVIEMXS7TTUI6QYSVQ/ Pretty sure they know about it in Fedora land.

…

On Mon, May 21, 2018, 3:21 PM Martin Bříza ***@***.***> wrote: I updated my Mac this week and I'm planning to see what I can do about this. Probably during the weekend. However, my Apple developer account has expired so don't expect miracles. I'll try to at least see if all the binaries are signed right or if something changed on the Apple side. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#163 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AJn6Rd_vxkrmyNE-sZC6JGULWT69YMstks5t0y_ggaJpZM4TkUM_> .

[MartinBriza]

I checked on my Mac now (just 10.12.6 but I assume the results will be similar for High Sierra when the update finishes). 4.1.1-rebuilt from this repo (when I still had my Apple Developer account) is okay. 4.1.1 from getfedora.org is not okay. Hence, this is a Fedora releng issue. I'll close this and keep in mind I have to bug them extra hard to actually get the certs when I release a new version.