Improperly signed update.

Asked by jgarnham

I know there are already about 100 questions on this, but in general they are specific to each person.

My problem, in a nutshell is that when I try to update Sparkle tells me improperly signed update.

Here's what I do:
1. Open up terminal and do 'ruby "Extras/Signing Tools/generate_keys.rb"' (without single quotes)
2. Add dsa_pub.pem to Xcode Project and add relevant key and value to info.plist.
3. Build app and zip it up.
4. Back to terminal and do 'ruby "Extras/Signing Tools/sign_update.rb" \ ~/Desktop/app.zip ~/Desktop/dsa_priv.pem'
5. Add returned string to update

I then go into an older version of my app, try and update but get 'Improperly signed update'.
It's important to note I've started this whole process from scratch 3 times and have always had the problem of the 'Improperly signed update' error.

Here's my update feed: http://squaredtiki.com/idzr/idzr-app-updates.xml

The only thing that did look slightly odd in my feed compared to the example feed, is that the signature is much longer but I'm unsure whether or not this is a problem.

Question information

Language:
English Edit question
Status:
Solved
For:
Sparkle Edit question
Assignee:
No assignee Edit question
Solved by:
Andy Matuschak
Solved:
Last query:
Last reply:
Revision history for this message
Best Andy Matuschak (andymatuschak) said :
#1

This usually happens because you have a non-OS X-standard version of OpenSSL. Newer versions have issues with the old generate_keys script. You can get a new copy at https://github.com/andymatuschak/Sparkle/blob/master/generate_keys.rb.

Revision history for this message
jgarnham (joshua-garnham) said :
#2

I've generated new keys using the new script, and done everything else but now a new problem has appeared. When I try to sign the Zip file by doing 'ruby "Extras/Signing Tools/sign_update.rb" \ ~/Desktop/app.zip ~/Desktop/dsa_priv.pem'.

I get an error saying 'sh: /Users/joshuagarnham/Desktop/app.zip: No such file or directory', but it still returns a signature. I'm guessing this isn't supposed to happen?

Revision history for this message
Andy Matuschak (andymatuschak) said :
#3

Remove the backslash: that's a line delimiter.

Revision history for this message
jgarnham (joshua-garnham) said :
#4

Thanks Andy Matuschak, that solved my question.