[R-SIG-Mac] R 3.5.3 pkg not signed

Christopher Helming cwh|t@ @end|ng |rom r|t@edu
Thu Mar 14 13:12:24 CET 2019


The 3.5.2 pkg was signed properly:
$ pkgutil --check-signature ~/Downloads/R-3.5.2.pkg
Package "R-3.5.2.pkg":
   Status: signed by a certificate trusted by Mac OS X
   Certificate Chain:
    1. Developer ID Installer: Simon Urbanek (VZLD955F6P)
       SHA1 fingerprint: 7B 6B 81 12 E6 26 8C 16 F8 D4 0F 94 E4 3E 62 69 2E 92 22 81
       -----------------------------------------------------------------------------
    2. Developer ID Certification Authority
       SHA1 fingerprint: 3B 16 6C 3B 7D C4 B7 51 C9 FE 2A FA B9 13 56 41 E3 88 E1 86
       -----------------------------------------------------------------------------
    3. Apple Root CA
       SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60

But the 3.5.3 pkg has no signature:
$ pkgutil --check-signature ~/Downloads/R-3.5.3.pkg
Package "R-3.5.3.pkg":
   Status: no signature

Is it possible to get 3.5.3 signed and replace the file on the download page?

Chris Helming

	[[alternative HTML version deleted]]



More information about the R-SIG-Mac mailing list