Message-ID: <4D80B490-479B-487B-96F4-E4ADBC73661B@gmail.com>
Date: 2019-03-14T14:06:23Z
From: Peter Dalgaard
Subject: R 3.5.3 macOS binary not signed?
In-Reply-To: <0244370A-4E21-436E-8789-DDF7C97DDFCB@R-project.org>
[Resending - screenshot was too big]
Actually, the OS does that even if we don't pay attention, so apparently people just haven't gotten around to upgrade and we haven't had new Mac users installing 3.5.3 yet. (To a first approximation, that is - some will of course know how to bypass the signature check).
-pd
> On 14 Mar 2019, at 14:36 , Simon Urbanek <simon.urbanek at R-project.org <mailto:simon.urbanek at R-project.org>> wrote:
>
> Marc,
>
> thanks, I'm glad that at least someone pays attention and checks the signature ;). I'm surprised my machine didn't raise a flag - I did test the image locally from the master URL before releasing.
>
> I have now updated the package to be signed, it is identical content, just signed. You can get is from the Mac master server https://mac.R-project.org/bin/macosx <https://mac.r-project.org/bin/macosx> now and other CRAN servers will sync in due time.
>
> Thanks,
> Simon
>
>
>
>> On Mar 14, 2019, at 8:18 AM, Marc Schwartz via R-SIG-Mac <r-sig-mac at r-project.org <mailto:r-sig-mac at r-project.org>> wrote:
>>
>> Hi,
>>
>> I just tried to install the R 3.5.3 macOS binary from CRAN.
>>
>> The SHA hash matches what is on CRAN, but I get an unknown developer message when I try to install.
>>
>> I get:
>>
>> pkgutil --check-signature R-3.5.3.pkg
>> Package "R-3.5.3.pkg":
>> Status: no signature
>>
>>
>> I rechecked the 3.5.2 binary and do not have the issue there.
>>
>> Thanks,
>>
>> Marc Schwartz
>>
>> _______________________________________________
>> R-SIG-Mac mailing list
>> R-SIG-Mac at r-project.org <mailto:R-SIG-Mac at r-project.org>
>> https://stat.ethz.ch/mailman/listinfo/r-sig-mac
>
> _______________________________________________
> R-SIG-Mac mailing list
> R-SIG-Mac at r-project.org <mailto:R-SIG-Mac at r-project.org>
> https://stat.ethz.ch/mailman/listinfo/r-sig-mac
--
Peter Dalgaard, Professor,
Center for Statistics, Copenhagen Business School
Solbjerg Plads 3, 2000 Frederiksberg, Denmark
Phone: (+45)38153501
Office: A 4.23
Email: pd.mes at cbs.dk <mailto:pd.mes at cbs.dk> Priv: PDalgd at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://stat.ethz.ch/pipermail/r-sig-mac/attachments/20190314/b6674a98/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-2.jpg
Type: image/jpeg
Size: 36987 bytes
Desc: not available
URL: <https://stat.ethz.ch/pipermail/r-sig-mac/attachments/20190314/b6674a98/attachment-0001.jpg>