Couple of handy (free) Mac apps for checking code signs and notarisation

[dannytaurus]

Two free Mac apps from Mothers Ruin.

First one is Apparency, which allows you to inspect the status of VST3 and AU plugins. You can see the signature and notarisation and the property list strings.

Here's Rhapsody VST3:

The AU has some extra property list strings, and one of them is a dead giveaway that it's a HISE plugin

Next app is Suspicious Package, which allows you to inspect your installer PKGs - what files they install and where, what scripts they run, the installer code sign and notarisation and more.

Here's the Rhapsody 3.0.0. installer PKG:

What's very cool is that you can drag and drop from the All Files tab in Suspicious Package, into Finder. So if you just want to grab any of the assets for a closer look, just drag them into a Finder window.

Oh, and it has a Finder Quick Look action too, so you can see the main details from Finder by hitting spacebar:

[David Healey]

@dannytaurus Nice finds.

This interests me:

Does that mean at some point I'll no longer need to notarize...

[dannytaurus]

@David-Healey I doubt it. Once you start notarising, I reckon you'll never stop.

[Oli Ullmann]

@dannytaurus
@David-Healey
That's interesting—so you have to notarize your plug-in files, too? I just signed mine and haven't received any reports of problems from my beta testers so far. However, my installer is also notarized and stapled.

@dannytaurus
Thanks for the tips on those cool tools! :-)

[David Healey]

@Oli-Ullmann said in Couple of handy (free) Mac apps for checking code signs and notarisation:

That's interesting—so you have to notarize your plug-in files, too? I just signed mine and haven't received any reports of problems from my beta testers so far. However, my installer is also notarized and stapled.

You notarize the installer (or zip file) and staple it and that also attached the notarization ticket to the plugins.

[Oli Ullmann]

@David-Healey
Ah, I see. Thanks. :-)

[Lindon]

@David-Healey said in Couple of handy (free) Mac apps for checking code signs and notarisation:

@Oli-Ullmann said in Couple of handy (free) Mac apps for checking code signs and notarisation:

That's interesting—so you have to notarize your plug-in files, too? I just signed mine and haven't received any reports of problems from my beta testers so far. However, my installer is also notarized and stapled.

You notarize the installer (or zip file) and staple it and that also attached the notarization ticket to the plugins.

I notarize the plugins too, but Im not using any sort of installer - so Im notarizing the zip they are in...