Sparkle

The update is improperly signed

Asked by Tanaris

So I've been using Sparkle for about a year now for my app, and suddenly today it decided to pop up with "The update is improperly signed" and I'm completely clueless as yo why.

Anyone have any ideas as to how I can debug this?

Latest app: http://pocketgno.me/download/pocket-gnome-1.6.0.1.zip
Older app (App -> Check for updates): http://pocketgno.me/download/pocket-gnome-1.6.zip
The Feed:http://pocketgno.me/appcast.xml

Thanks in advance!

Note: I did just move from version 1.5.x.x to 1.6.x.x (not sure if that matters?)

Question information

Language:
English Edit question
Status:
Answered
For:
Sparkle Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Andy Matuschak (andymatuschak) said : 		#1

This is likely caused by a change in the OpenSSL version used to sign the archive. If you open a command line and type "openssl version," what do you get?

Revision history for this message
Tanaris (tanaris4) said : 		#2

OpenSSL 1.0.0d 8 Feb 2011

Revision history for this message
Andy Matuschak (andymatuschak) said : 		#3

Yep. You've got a version that's newer than the one that comes with OS X. It doesn't like keys generated with the 0.9.x version that comes with SL or Lion. If you're using MacPorts or Homebrew or something, try disabling that OpenSSL or directly executing the system openssl to sign your updates.

Revision history for this message
Tanaris (tanaris4) said : 		#4

Kind of hilarious, how do I execute the system openssl?

Thanks again, I swear I spent 4 hours the other day doing a custom build from SVN (I ended up just disabling the signature checks altogether)

Revision history for this message
Andy Matuschak (andymatuschak) said : 		#5

Try running "which openssl". It'll probably show /usr/local/bin/openssl or /opt/bin/openssl or something. The system one is at /usr/bin/openssl.

Can you help with this problem?

Provide an answer of your own, or ask Tanaris for more information if necessary.

To post a message you must log in.