Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How can I tell who code signed an OS X app?

Tags:

macos

codesign

On Windows, I can right-click a file and see who code signed it on the "Digital Signatures" tab of the Properties dialog. Is there a similar way to see which publisher signed an OS X app, or details about the certificate used to sign it?

I know I can run codesign -d -r- appname.app to see details about the certificate, and codesign -vvvv appname.app to see whether it passes validation, but neither of those shows me anything about the actual certificate or publisher who signed it, just the one in the bundle identifier for the app.

like image 308
Colen Avatar asked Sep 07 '12 16:09

Colen


People also ask

How do I verify a signature code?

Right click the .exe of the program in question and select Properties. Select Digital Signatures. Under Signature List, select the Signature, and click Details. You will see information regarding the Code Signing certificate that was used to sign the executable.

What is iOS code signing?

Mandatory code signingTo help ensure that all apps come from a known and approved source and haven't been tampered with, iOS and iPadOS require that all executable code be signed using an Apple-issued certificate. Apps provided with the device, like Mail and Safari, are signed by Apple.


2 Answers

Use

$ codesign -dvvv the.app

And look to the Authority fields such as

Authority=Adobe Systems, Incorporated

However, apps distributed on the Mac App Store are all signed by Apple's certificate:

Authority=Apple Mac OS Application Signing

like image 111
Bobjt Avatar answered Sep 20 '22 16:09

Bobjt


There’s also a nice and free GUI utility called RB App Checker Lite:

RB App Checker Lite screenshot

like image 29
zoul Avatar answered Sep 20 '22 16:09

zoul