Working on an open source project, confused about signing the updates!

Asked by adam baldwin

Hello I am working on an open source project which uses Sparkle as the updater, I have got it connected to my appcast and got it downloading, obviously I now get the "update is not signed" message.

The documentation states the "extras" folder, I cannot find this folder.

When I open the Sparkle.framework from xcode all I get is a headers, resources and versions folder.

I am probably being stupid but really need help!

Question information

Language:
English Edit question
Status:
Solved
For:
Sparkle Edit question
Assignee:
No assignee Edit question
Solved by:
Hofman
Solved:
Last query:
Last reply:
Revision history for this message
Hofman (cmhofman) said :
#1

It's in the Sparkle distribution. It's also in the sources. It's not linked in the xcode project, and it's also not in the framework.

Revision history for this message
adam baldwin (cats11112) said :
#2

I downloaded Sparkle and opened the ruby file (thanks for letting me know!)

Now once clicked the generate keys saying the pem files have been created, back up your private key and keep it safe.
Where does it put the key so I can back it up, sorry about this I feel like such a newb!

Revision history for this message
Andy Matuschak (andymatuschak) said :
#3

The files are placed in the working directory of wherever you ran the script.

Revision history for this message
adam baldwin (cats11112) said :
#4

I clicked on the generate keys.rb in the extras file, it then displayed this in xcode:

#!/usr/bin/ruby
["dsaparam.pem", "dsa_priv.pem", "dsa_pub.pem"].each do |file|
  if File.exist? file
    puts "There's already a #{file} here! Move it aside or be more careful!"
  end
end

etc....

i'm still confused as to where the pem files are?

Thanks.

Revision history for this message
adam baldwin (cats11112) said :
#5

I clicked on the generate keys.rb in the extras file, it then displayed this in xcode:

#!/usr/bin/ruby
["dsaparam.pem", "dsa_priv.pem", "dsa_pub.pem"].each do |file|
  if File.exist? file
    puts "There's already a #{file} here! Move it aside or be more careful!"
  end
end

etc....

i'm still confused as to where the pem files are?

Thanks.

Revision history for this message
Best Hofman (cmhofman) said :
#6

Probably nowhere. You don't "click" (i.e. edit) the ruby file, you *run* it, in Terminal.app.

Revision history for this message
adam baldwin (cats11112) said :
#7

ruby "/Users/AdamB/Downloads/Sparkle 1.5b6/Extras/Signing Tools/generate_keys.rb"

I put the above into terminal and got this:

Generating DSA parameters, 2048 bit long prime
This could take some time
....................+.................+.....+++++++++++++++++++++++++++++++++++++++++++++++++++*
........+...................+.+......+..............+........+...........+.....+....+....+....+................+..............+.......+......................+..........................+.........+...........+..............+....+.......+..+......+...+.+.............+.........+..+..........+..................+........+..........+.............+........................+..+.....+.+.+..+..............+.....+....+..........+.....+..+.........................+.....+.................+.....+.......+........+.+.+.+....+..+.....+...............+.....+.....+..+....+..................+..+..+..+.........+.........+..........+......+..+.....+.........+.......+.....+.....+.................+....+.......+........+........+...............+..+.......+..................+.....+..........+..........+............+..........+....+.....+.............................+...+..........................+...+.............+.......................+.+.......................+..+..................+.+...............+....+....+..+.................+............+.......................................+................................+....+....+............+.........+.........+................+.+..................+...+........................+.....+.......+.+..........+..................................+.............+.......................+............+..............+..+.........+....+......+....+...........+................................+.........+..............+..............+............+........+.............+........+.+....+..+................+.+...+........+..........+......+...+........+...........+.....+.+++++++++++++++++++++++++++++++++++++++++++++++++++*
Generating DSA key, 2048 bits
read DSA key
writing DSA key

Generated private and public keys: dsa_priv.pem and dsa_pub.pem.

BACK UP YOUR PRIVATE KEY AND KEEP IT SAFE!

I am still not sure where the pem files have been placed?

Revision history for this message
adam baldwin (cats11112) said :
#8

Never mind it appears to be in my AdamB directory.

Thanks for all your help!

Revision history for this message
adam baldwin (cats11112) said :
#9

Thanks Hofman, that solved my question.