v1.2.2

What's new

• bug fix: notifications with osascript

File Information

File: Xipper-v1.2.2-20160905.dmg
Size: 0.256147 MB
Hash (SHA-2, 256 bit): 8c590c91d1ae722b5c8b092eb6f0a1b8d95f9650a02e5df51981237aa621f0b0
Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
Prehashing: false [compatible with OpenBSD signify]

v1.2.1

What's new

• Xipper ➤ Verify now also outputs a signature's SHA-1 fingerprints (leaf & root certificate)
• little things

File information

File: Xipper-v1.2.1-20160825.dmg
Size: 0.348615 MB
Hash (SHA-2, 256 bit): bf2e0b90ae92fd26f49efade2d9247791c4714d0f0b51b64f3a627af6074cb27
Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
Prehashing: false [compatible with OpenBSD signify]

v1.2.0

What's new

general

• split original Xipper workflow/script into Xipper ➤ Create and Xipper ➤ Verify workflows/scripts
• please remove any earlier versions of Xipper.workflow or xipper.sh
• now uses the find command with reversed-order sort and tail to detect the root certificate
• username now determined with the id command, because the who am i | awk combination might create trouble
• notifications: swapped username and "Xipper"

Xipper ➤ Create

• if multiple files are selected, the user has to choose between two options: (a) create one xip archive with all files; (b) create one xip archive per file
• now checks if parent directory of target is writable; if not, e.g. when xipping a file from /System/Library, the xip is saved to the user's home folder
• checks if targets share the same parent directory in case the user selects multiple files to create one archive from
• doesn't exit anymore if user is offline, but just disables timestamping instead
• certificate list is now sorted and only shows unique entries, because on some users' systems there are multiple instances of the same com.apple.idms.appleid.prd certificate
• skip archive creation in rare cases when the (non-root) user doesn't even have read permissions on target file, e.g. -rw-------

Xipper ➤ Verify

• adds support for certificates "trusted on this system", e.g. those in the system.keychain as opposed to the login.keychain
• additional error message if Xipper is unsuccessful in revoking the trust of a protected certificate, e.g. in the system.keychain; then opens Keychain Access for manual revocation
• added emojis to notifications for visual emphasis

File information

• File: Xipper-v1.2.0-20160819.dmg
• Size: 0.359614 MB
• Hash (SHA-2, 256 bit): bb1661913ac25edd0602a05d16248b8d0db83c4f44925b69d913ccfb36dbbcb2
• Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
• Prehashing: false [compatible with OpenBSD signify]

v1.1

What's new

• pem and xml files now remain in the Xipper cache folder until next run, so the user has the ability to inspect them manually
• added "Revoke Trust" option for certificates trusted only by the user, not by macOS default
• removed "Trust Leaf" option, because that can create all sorts of trouble, e.g. when a trusted leaf is paired with its untrusted root; note: leaf certificates are imported and trusted as root, if there is only one pem file

File information

• File: Xipper-v1.1-20160811.dmg
• Size: 0.166570 MB
• Hash (SHA-2, 256 bit): dc80fb2af2991de2286952fd8c318c106d3fc5c3b4a0c974eefcdec9d569c30b
• Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
• Prehashing: false [compatible with OpenBSD signify]

v1.0.2

What's new

• fixed sed corruption bug (see below; v1.0.1)
• added support for pkgutil status "signed Apple software"
• read root CA certificate issuer's common name as additional info, if there's the default three-part certificate chain; in other cases the leaf's issuer is also root

File information

• File: Xipper-v1.0.2-20160810.dmg
• Size: 0.198407 MB
• Hash (SHA-2, 256 bit): 3ad2c7c4f0e6d473a92c6b01055f4144e898f17896ab3e79e3a068b89d87eb14
• Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
• Prehashing: false [compatible with OpenBSD signify]

v1.0.1

What's new

• notifications & info window: distinction between certificates trusted by macOS and those trusted only by the user (pkgutil status)
• Note: there is a whitespace removal bug with a sed command; with some certificates this can lead to the deletion of leading t characters instead of just \t (tab), resulting in a corrupted PEM certificate; this will be fixed in v1.0.2

File information

• File: Xipper-v1.0.1-20160809.dmg
• Size: 0.204666 MB
• Hash (SHA-2, 256 bit): 0d01c1b34a26afc1e1d7d0d006462976eb4f8dc5dfb872334c25f2ac293c204a
• Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
• Prehashing: false [compatible with OpenBSD signify]

v1.0

[Initial release]

File Information

• File: Xipper-v1.0-20160809.dmg
• Size: 0.712102 MB
• Hash (SHA-2, 256 bit): aae68822fb77f60aa12ccd98c8586e6177a9e4d436a3963a70258f6985c1eded
• Minisign public key: RWSHxwNerDDQN8RlBeFUuLkB9bPqsR2T6es0jmzguvpvqWiXjxzTfaRY
• Prehashing: false [compatible with OpenBSD signify]