|Tunnelblick Saying Update Improperly Signed||Daniel Chan||4/9/12 8:53 AM|
I'm having issues having updates pushed to the client. So what I've
done is had a appcast.rss hosted on my site for the Sparkle framework
The version on the server side is signed with the same certificate as
the one I'm currently using, however it is at a higher version. It
prompts that there is an update perfectly fine, but approaching the
end of the download, it seems to give an error, saying that it's
How can I fix this issue?
<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:sparkle="http://www.andymatuschak.org/xml-
<description>Most recent changes with links to updates.</
<title>BurstVPN Client (Added Japan, Tokyo.)</title>
<pubDate>Tue, 27 March 2012 8:00:00 +0800</pubDate>
|Re: Tunnelblick Saying Update Improperly Signed||Tunnelblick developer||4/9/12 9:29 AM|
Some comments, in no particular order:
Make sure you're not confusing the update signature with the digital signature on the app. See Digital Signatures for details.
Your actual .rss must contain a valid length field and signature:
A standard copy of Tunnelblick contains the Tunnelblick Project's dsa_pub.pem, and it will only accept updates that are signed by the Tunnelblick Project private key. (That's the whole point of the digital signatures). So you have to distribute a copy of Tunnelblick that not only has a Deploy folder, but has your dsa_pub.pem. That can be updated only with an update signed by your private key.
An alternative is to skip the DSA signatures, and update from an https: site. Then the signature is unnecessary.
|Re: Tunnelblick Saying Update Improperly Signed||Daniel Chan||4/12/12 3:16 AM|
How can I create a public and private DSA on mac?
|Re: Tunnelblick Saying Update Improperly Signed||Tunnelblick developer||4/12/12 4:04 AM|
The documentation for Sparkle is at https://github.com/andymatuschak/Sparkle/wiki
Section 3 describes how to create and use signing keys.
You'll have to download Sparkle 1.5b6 from http://sparkle.andymatuschak.org (use "Get Sparkle 1.5 b6" button on the right side.)