R 3.6.2 installer / Catalina / Notarization

On Dec 13, 2019, at 9:39 AM, Simon Urbanek <simon.urbanek at r-project.org> wrote:

Bob,

thanks - oddly, it didn't show when I tested it on Catalina, there must be a flag somewhere. As discussed before we cannot notarize any version of R before 4.0.0 so Catalina users have to either stick to 3.5.1 (since Apple has grand-fathered installers create before Catalina) or use the Ctrl+click way to install R 3.6.2.

Cheers,
Simon

On Dec 13, 2019, at 12:30 PM, Bob Rudis <bob at rud.is> wrote:

While easily remedied via right-click + open, out-of-the-box installer gives the Apple daft (and technically incorrect since Apple could most certainly check it for malicious software):

  ?R-3.6.2.pkg? can?t be opened because Apple cannot check it for malicious software.

message.


Here's what spctl returns:

  $ spctl -a -vv -t install R-3.6.2.pkg
  R-3.6.2.pkg: rejected
  source=Unnotarized Developer ID
  origin=Developer ID Installer: Simon Urbanek (VZLD955F6P)


NOTE: R & R.app work fine once installed.

Not sure if this is going to cause consternation in "corporate" environments.

-boB