R 3.5.3 macOS binary not signed?

On Mar 14, 2019, at 9:36 AM, Simon Urbanek <simon.urbanek at R-project.org> wrote:

Marc,

thanks, I'm glad that at least someone pays attention and checks the signature ;). I'm surprised my machine didn't raise a flag - I did test the image locally from the master URL before releasing.

I have now updated the package to be signed, it is identical content, just signed. You can get is from the Mac master server https://mac.R-project.org/bin/macosx now and other CRAN servers will sync in due time.

Thanks,
Simon

On Mar 14, 2019, at 8:18 AM, Marc Schwartz via R-SIG-Mac <r-sig-mac at r-project.org> wrote:

Hi,

I just tried to install the R 3.5.3 macOS binary from CRAN.

The SHA hash matches what is on CRAN, but I get an unknown developer message when I try to install.

I get:

pkgutil --check-signature R-3.5.3.pkg
Package "R-3.5.3.pkg":
 Status: no signature


I rechecked the 3.5.2 binary and do not have the issue there.

Thanks,

Marc Schwartz