Download and install error

[Hylton Conacher (ZR1HPC)]

Using iMac Big Sur 11.7.10 and recently downloaded
<https://github.com/FirebirdSQL/firebird/releases/download/v5.0.0/Firebird-5.0.0.1306-0-macos-x64.pkg>

When I try and open the pkg to begin the install I get
"“Firebird-5.0.0.1306-0-macos-x64.pkg” cannot be opened because it is
from an unidentified developer." " MacOS cannot verify that the app is
free of Malware"

Wassup?

Hylton

[Mark Rotteveel]

Our releases are not signed yet. There was some talk a while back at
getting releases signed, but I'm unaware if 1) this is in the works, and
2) would include signing macOS releases (back then it was more about the
Windows builds).

As far as I'm aware there should be an option to install anyway, see
https://support.apple.com/guide/mac-help/open-a-mac-app-from-an-unidentified-developer-mh40616/mac

That said, the error is a bit scare-mongering, even if a build is
signed, macOS wouldn't be able to verify "that the app is free of
[m]alware". Ar at least, they don't actually do that, they just check if
it is signed, and assuming that a signed build somehow can't contain
malware is a bit of a leap of logic.

Mark
--
Mark Rotteveel

[Dimitry Sibiryakov]

'Mark Rotteveel' via firebird-support wrote 06.07.2024 9:44:
> Ar at least, they don't actually do that, they just check if it is signed, and
> assuming that a signed build somehow can't contain malware is a bit of a leap of
> logic.

This is a different logic: if a malware is found they know who must be blamed.
This is not about safety but responsibility.

--
WBR, SD.

[Mark Rotteveel]

Sure, but the macOS error claims they cannot verify if the app is free
of malware, but they don't actually perform such verification.

Mark
--
Mark Rotteveel

[Dimitry Sibiryakov]

'Mark Rotteveel' via firebird-support wrote 06.07.2024 12:02:
> Sure, but the macOS error claims they cannot verify if the app is free of
> malware, but they don't actually perform such verification.

"People lie." (c)

--
WBR, SD.

[Hamish Moffatt]

There's a bit more than just signatures involved on macOS - you also
have to notarize the build, which involves uploading it to Apple where
they run some checks and add their signature to your package.

Hamish

[Elmar Haneke]

Am 06.07.24 um 12:02 schrieb 'Mark Rotteveel' via firebird-support:

In the "notarization" step there might happen some basic scanning.

An signature is not sufficient ou suppress that warning, the pkg has to be uploaded to apple to get "notarized" in addition.

[Elmar Haneke]

As far as I'm aware there should be an option to install anyway, see https://support.apple.com/guide/mac-help/open-a-mac-app-from-an-unidentified-developer-mh40616/mac

That link should be added to Download-page as long as the installer does not have a valid notarization.

[Hylton Conacher (ZR1HPC)]

I thank you all for your input BUT,

The issue is I am STILL NOT able to use your software, despite having a
need for it.

So I believe that the Firebird team need to get their software builds
approved by Apple if they want to continue calling it cross platform.

> --
> You received this message because you are subscribed to the Google
> Groups "firebird-support" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to firebird-suppo...@googlegroups.com
> <mailto:firebird-suppo...@googlegroups.com>.
> To view this discussion on the web, visit
> https://groups.google.com/d/msgid/firebird-support/e3204df4-0146-4735-a379-8acc3242ca3b%40haneke.de <https://groups.google.com/d/msgid/firebird-support/e3204df4-0146-4735-a379-8acc3242ca3b%40haneke.de?utm_medium=email&utm_source=footer>.

[Dimitry Sibiryakov]

Hylton Conacher (ZR1HPC) wrote 08.07.2024 13:57:
> The issue is I am STILL NOT able to use your software, despite having a need for
> it.

You can install VM on your Mac and use the software there.
Alternatively you can join development team as a Mac maintainer and take care
about whole Apple notarization process.

> So I believe that the Firebird team need to get their software builds approved
> by Apple if they want to continue calling it cross platform.

"Cross platform" doesn't mean "any platform". Firebird doesn't run on QNX,
VAX VMS, OS/2, S/370, XBOX, PlayStation and so on. The list of supported
platforms is very much shorter than list of unsupported. And it is not only for
Firebird, it is for any software piece.
If Apple reject third-party software and you are stuck on Apple - it is not
Firebird's problem.

--
WBR, SD.

[Elmar Haneke]

Am 08.07.24 um 13:57 schrieb Hylton Conacher (ZR1HPC):

I thank you all for your input BUT,

The issue is I am STILL NOT able to use your software, despite having a need for it.

Really???

Is an Action as Press key Ctrl, Rightclick installer in finder, choose open from menu, release key Ctrl really preventing you from using FirebirdSQL?

[Hamish Moffatt]

On 8/7/24 21:57, Hylton Conacher (ZR1HPC) wrote:
> I thank you all for your input BUT,
>
> The issue is I am STILL NOT able to use your software, despite having
> a need for it.
>
> So I believe that the Firebird team need to get their software builds
> approved by Apple if they want to continue calling it cross platform.
>

The Windows builds aren't signed either. It's nothing personal.


Hamish