ZorgandGitHub 1ca60d5ab6 Add option to verify updates before extraction (#2667) ...

Adds an opt-in option (SUVerifyUpdateBeforeExtraction) to enforce verifying updates before extracting them for stronger security. EdDSA signing is required to use this option. As fallback in case EdDSA keys are lost, disk image archives's code signatures are validated assuming it's Developer ID signed. Key rotation is still possible.

Apple Archives (aar, yaa) now require using this option.

2024-12-08 16:31:26 -08:00

..

SUUpdateValidatorTest

Test post-validation of code-signed binaries

2020-06-16 21:13:39 +01:00

DevSignedApp.zip

Remove redundant codesign check (#2341)

2023-03-12 19:44:50 -07:00

DevSignedAppVersion2.dmg

Add option to verify updates before extraction (#2667)

2024-12-08 16:31:26 -08:00

DevSignedAppVersion2.zip

Remove redundant codesign check (#2341)

2023-03-12 19:44:50 -07:00

signed-test-file.txt

Avoid hardcoded file paths.

2014-08-27 21:37:47 -04:00

SparkleTestCodeSign_apfs_lzma_aux_files_adhoc.dmg

Add option to verify updates before extraction (#2667)

2024-12-08 16:31:26 -08:00

SparkleTestCodeSign_apfs.dmg

Add apfs dmg unarchiving test (#2028)

2021-11-25 15:53:19 -05:00

SparkleTestCodeSign_pkg.dmg

Skip extracting auxiliary files and improve extraction progress for disk images (#2569)

2024-05-27 13:30:55 -07:00

SparkleTestCodeSignApp_bad_extraneous.zip

Fix unarchiving job being blocked when passed bad input (#2023)

2021-11-24 11:16:31 -05:00

SparkleTestCodeSignApp_bad_header.zip

Fix unarchiving job being blocked when passed bad input (#2023)

2021-11-24 11:16:31 -05:00

SparkleTestCodeSignApp.aar

Add support for extracting Apple Archives (.aar files) (#2586)

2024-06-18 20:18:11 -07:00

SparkleTestCodeSignApp.dmg

Improve Unarchiver Tests

2015-09-05 10:00:59 -04:00

SparkleTestCodeSignApp.enc.aar

Add support for extracting Apple Archives (.aar files) (#2586)

2024-06-18 20:18:11 -07:00

SparkleTestCodeSignApp.enc.dmg

Encrypted dmg support

2015-11-02 10:02:31 -05:00

SparkleTestCodeSignApp.enc.nolicense.dmg

Add unarchiving test for regular encrypted disk image (#2571)

2024-05-27 14:10:28 -07:00

SparkleTestCodeSignApp.tar

Improve Unarchiver Tests

2015-09-05 10:00:59 -04:00

SparkleTestCodeSignApp.tar.bz2

Improve Unarchiver Tests

2015-09-05 10:00:59 -04:00

SparkleTestCodeSignApp.tar.gz

Improve Unarchiver Tests

2015-09-05 10:00:59 -04:00

SparkleTestCodeSignApp.tar.xz

Improve Unarchiver Tests

2015-09-05 10:00:59 -04:00

SparkleTestCodeSignApp.zip

Add SUCodeSigningVerifier unit tests.

2015-04-13 15:27:59 -05:00

test-dangerous-link.xml

Don't construct appcast item if enclosure URL is invalid (#2317)

2023-02-07 20:12:07 -08:00

test-links.xml

Don't construct appcast item if enclosure URL is invalid (#2317)

2023-02-07 20:12:07 -08:00

test-pubkey.pem

Avoid hardcoded file paths.

2014-08-27 21:37:47 -04:00

test-relative-urls.xml

Support relative links for fullReleaseNotesLink and enforce http(s) (#2003)

2021-11-06 01:56:50 -07:00

test.pkg

Make guided package installs the default for updating packages

2016-12-28 23:15:22 -05:00

testappcast_channels.xml

Fall back to regular update if delta update fails to download (#2118)

2022-05-01 22:58:29 -07:00

testappcast_info_updates.xml

Add sparkle:belowVersion element for informational updates (#2080)

2022-01-29 10:35:24 -08:00

testappcast_minimumAutoupdateVersion.xml

Adopt sparkle:version and sparkle:shortVersionString elements

2021-06-26 21:01:39 -07:00

testappcast_minimumAutoupdateVersionSkipping2.xml

Add option to ignore skipped upgrades (#2081)

2022-01-29 23:02:45 -08:00

testappcast_minimumAutoupdateVersionSkipping.xml

Don't let skipping a major version to skip subsequent major versions (#2079)

2022-01-29 10:37:09 -08:00

testappcast_phasedRollout.xml

Pull current date out of appcast filtering and add tests for phased group rollouts (#1889)

2021-07-11 16:47:05 -07:00

testappcast.xml

Add support for plain text release notes view (#2315)

2023-02-11 19:34:26 -08:00

testlocalizedreleasenotesappcast.xml

Fix test cases for localized release notes (#2444)

2023-09-28 22:52:32 -07:00

testnamespaces.xml

Merge branch 'master' into ui-separation-and-xpc

2016-12-23 14:44:32 -05:00