Skip to content

v1.4.1

Choose a tag to compare

@JayBrown JayBrown released this 08 Sep 12:45
· 10 commits to master since this release

What's new

  • since a user's local DiMaGo Base Identity is also used to sign the CMS checksum file(s), the identity's public key might wind up in other users' keychains; so in order to distinguish each base identity in the wild, the certificate now also contains the random email address string in the subject's common name
  • users can keep their old base identity, but if they want a new one, they just need to delete the preferences file:
    rm -rf ~/Library/Preferences/local.lcars.dimago.plist
  • DiMaGo now ignores public keys of other users' base identities that wound up in the local keychain, e.g. from a CMS signature; these public keys are only meant for CMS signing and local encryption for the owner of the private key
  • the public key list now also contains the subject's common name alongside the email address
  • sleeps for 1 second before codesigning; sometimes the system isn't fast enough, and codesign will not receive the disk image's filename in time to use for Notification Center

File information

File: DiMaGo-v1.4.1-beta-20160908.dmg
Size: 0.326511 MB
Hash (SHA-2, 256 bit): 21a83d3ad58533bd9474d72a9e45e18ae4926d582d7d4b9c61f9d20cc30bf673
Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
Prehashing: false [compatible with OpenBSD signify]