47 Commits
Author SHA1 Message Date
Elliot Jordan 60a0c279c9 Warn if using incorrect "requirements" input var 2021-02-14 23:04:32 -08:00
Elliot Jordan 6828f0f53b Prevent overwriting correct input var with incorrect, if both are used 2021-02-14 23:01:51 -08:00
Nick McSpadden dda6ad8442 Cleanup of CodeSignatureVerifier's get() calls 2020-02-07 10:49:03 -08:00
Nick McSpadden 1a3481f1ff CodeSignatureVerifier warns about using 'expected_authorities' 2020-02-07 09:58:43 -08:00
Nick McSpadden 81798784ec Reverting previous change to CodeSignatureVerifier 2019-11-20 17:13:53 -08:00
Nick McSpadden 8c6a8a8826 Merge branch 'py3_urlgetter_enhanced' into py2-to-3 2019-11-20 16:32:58 -08:00
Nick McSpadden 8bb4c7b3a1 Fixed a whole bunch of unnecesasry extra quotes 2019-11-17 20:01:13 -08:00
Michal Moravec dbb5acdbeb Set text or binary mode for all Popen calls
Also make slight code modifications related to this change
2019-11-17 20:21:15 +01:00
Michal Moravec 845337ef89 Change pkgutil_check_signature() Popen stream type to text 2019-11-16 19:38:59 +01:00
Nick McSpadden 6cff4a35d3 CodeSignatureVerification doesn't complain about byte and string comparison 2019-11-12 14:32:32 -08:00
Nick McSpadden 03d1bfafd2 Changing python interpreter path to /usr/local/autopkg/python 2019-11-06 14:38:50 -08:00
Nick McSpadden 0eef8d2303 Update CodeSignatureVerifier with f-strings 2019-11-01 08:17:19 -07:00
Nick McSpadden eeac828a73 Moving to custom py3 interpeter 2019-10-29 16:33:36 -07:00
Nick McSpadden 60fd0fcdde Extra isort run 2019-10-29 14:55:06 -07:00
Nick McSpadden f1314c081c Py2-to-3 conversion 2019-10-24 16:23:20 -07:00
Michal Moravec 81aed1464c Fix isort errors (#536) 2019-06-11 08:06:30 -07:00
Nick McSpadden 29cbe1c0ca Blackening all Python code (#526) 2019-05-17 12:26:25 -07:00
Nick McSpadden 2fd4c8589b CodeSignatureVerifier flake8 + isort (#466) 2019-05-09 10:40:53 -07:00
Hannes Juutilainen cf9367c1e2 Changed the expected_authority_names error wording. 2017-09-07 13:58:32 +03:00
Hannes Juutilainen 7b4316c6ff Changed the way boolean input variables are checked to make it possible to define them with -k option. 2017-09-07 13:54:27 +03:00
Hannes Juutilainen 3d7045d4f3 New options for CodeSignatureVerifier.
Verification with codesign tool can now be further controlled:
- deep_verification, boolean value to control the --deep option
- strict_verification, boolean value to control the --strict/--no-strict option
- codesign_additional_arguments, list of argument strings to pass to codesign

Using `expected_authority_names` to verify code signatures is now deprecated and raises an error.
2017-09-06 21:43:30 +03:00
Nick McSpadden d6a79b48bc Docstrings list required versions 2016-04-28 16:35:52 -07:00
Hannes Juutilainen a55faf2665 Print a warning when expected_authority_names array is used for verifying .app bundles. 2016-03-07 21:01:22 +02:00
Greg Neagle fb990d4b8a Extend CodeSignatureVerifier.py to verify .xip archives as well. See https://github.com/autopkg/jps3-recipes/pull/22#issuecomment-192518322 2016-03-04 16:01:06 -08:00
Hannes Juutilainen f1527b0fe8 Input path is now always globbed.
Input path is now always globbed instead of globbing only within a mounted disk image. Adapted from Installer.py.
2016-02-26 20:58:39 +02:00
Hannes Juutilainen 4c9cb5df20 Updated input variable descriptions 2016-02-26 20:54:36 +02:00
Ryan Manly a55a6e0cb3 just return bools of test 2016-02-19 10:53:41 -06:00
Timothy Sutton cfaaa98fcf ProcessorError note about CodeSignatureVerifier's disable flag for failures 2014-12-09 15:39:26 -05:00
Timothy Sutton a2b4b085d1 PyLint 2014-12-09 15:28:36 -05:00
Timothy Sutton abd292f375 Updated descriptions for DISABLE_CODE_SIGNATURE_VERIFICATION 2014-11-18 09:27:37 -05:00
Allister Banks c6972f6651 As per @timsutton's feedback, allow optout as Pref
This alters the main function to allow for code signature verification
to be overwritten by a global pref or a key fed to the running of a
recipe. It merely checks for the existence of ANY value on that key,
and returns from main (skipping the actual check code) as a result.
2014-11-17 16:31:26 -05:00
Timothy Sutton 8326ba5ce9 PyLint cleanups 2014-10-16 16:50:32 -04:00
Hannes Juutilainen 6451139139 Do a proper version comparison with StrictVersion and only do deep verification on OS X 10.9.5 and later. 2014-10-13 11:21:21 +03:00
Hannes Juutilainen 98c9c3e6f3 Use --deep option with codesign unless running on 10.6 2014-10-09 20:04:10 +03:00
Hannes Juutilainen 8596f0ed48 Initial support for verifying requirements 2014-08-28 05:49:51 -04:00
Greg Neagle 12013235e4 PyLint cleanups for autopkglib/CodeSignatureVerifier.py 2014-08-07 15:55:03 -07:00
Greg Neagle 2453e29ecf Remove all trailing whitespace from autopkglib/*.py 2014-08-06 15:36:36 -07:00
Greg Neagle 7a8df0ba00 Change 'shebang' line in all Python files to ensure we attempt to use the system Python and not some other Python the user might have installed. 2014-08-02 12:19:10 -07:00
Timothy Sutton 3df1d83aae Refactor processors that can mount disk images to use helper
- DmgMounter.parsePathForDMG()
2014-07-10 14:55:16 -04:00
Hannes Juutilainen 91d126479e Updated the input_variable descriptions 2014-05-30 21:38:15 +03:00
Hannes Juutilainen ab846e9e8a Corrected the codesign command in docstring 2014-05-30 21:37:18 +03:00
Hannes Juutilainen d030154117 Shouldn't use camelCase for variable names 2014-05-30 21:35:25 +03:00
Hannes Juutilainen a42e4907ab Don't try to verify installer package signature on Mac OS X 10.6 2014-05-24 11:57:33 +03:00
Hannes Juutilainen b5d5139560 Added globbing for .dmg files 2014-05-22 15:10:44 +03:00
Hannes Juutilainen 7ad498fbea Updated the description for expected_authority_names 2014-05-22 10:51:51 +03:00
Hannes Juutilainen 487cdc9b8a Should not fail if expected_authority_names is missing 2014-05-21 08:37:53 +03:00
Hannes Juutilainen 319c9adbe3 Initial commit for CodeSignatureVerifier processor 2014-04-27 21:19:05 +03:00