Redline updater hardening: signed-update verification, atomic install + revert, update visibility, notarization pipeline (MMDB-2681) #24
@@ -359,8 +359,11 @@ SPCTL_STATUS=$?
|
||||
set -e
|
||||
echo "${SPCTL_OUTPUT}"
|
||||
if [[ "${SPCTL_STATUS}" -ne 0 ]] || ! grep -qi 'accepted' <<<"${SPCTL_OUTPUT}"; then
|
||||
echo "spctl did not report accepted for ${APP_BUNDLE}." >&2
|
||||
if [[ "${NOTARIZED}" == "true" ]]; then
|
||||
echo "spctl did not report accepted for ${APP_BUNDLE} although it was notarized." >&2
|
||||
exit 1
|
||||
fi
|
||||
echo "WARNING: Gatekeeper does not accept this build (not notarized). First install on other Macs needs right-click > Open." >&2
|
||||
fi
|
||||
|
||||
TEAM_IDENTIFIER="$(codesign -dv "${APP_BUNDLE}" 2>&1 | awk -F= '/^TeamIdentifier=/{print $2}')"
|
||||
|
||||
Reference in New Issue
Block a user