From 7e582d431b29d3877020dbadc37824da40c3807b Mon Sep 17 00:00:00 2001 From: Sebastian Stenzel Date: Thu, 5 Jun 2025 18:24:15 +0200 Subject: [PATCH 1/3] how to check .dmg signature --- docs/security/verify-installers.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/security/verify-installers.md b/docs/security/verify-installers.md index a46da38..395179d 100644 --- a/docs/security/verify-installers.md +++ b/docs/security/verify-installers.md @@ -45,8 +45,9 @@ Our Windows installers are signed using a code signing certificate. You can veri On macOS, you can verify the code signature of the Cryptomator app using the built-in `codesign` utility. This verification confirms the app's authenticity and integrity: 1. Open Terminal (found in Applications > Utilities). -2. Run the following command to check the signature: +2. Run either of the following command to check the signature: ``` + codesign -dv ~/Downloads/Cryptomator-*.dmg codesign -dv /Applications/Cryptomator.app ``` 3. Verify that the output includes: From 4239d98b9d279c25dc1773e7944bfb41b3de1d56 Mon Sep 17 00:00:00 2001 From: Sebastian Stenzel Date: Thu, 5 Jun 2025 18:27:05 +0200 Subject: [PATCH 2/3] plural [ci skip] --- docs/security/verify-installers.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/security/verify-installers.md b/docs/security/verify-installers.md index 395179d..61abd64 100644 --- a/docs/security/verify-installers.md +++ b/docs/security/verify-installers.md @@ -45,7 +45,7 @@ Our Windows installers are signed using a code signing certificate. You can veri On macOS, you can verify the code signature of the Cryptomator app using the built-in `codesign` utility. This verification confirms the app's authenticity and integrity: 1. Open Terminal (found in Applications > Utilities). -2. Run either of the following command to check the signature: +2. Run either of the following commands to check the signature: ``` codesign -dv ~/Downloads/Cryptomator-*.dmg codesign -dv /Applications/Cryptomator.app From 7a18db8eddbd60bed4e7cdcc0af1ebeb4b38b1fd Mon Sep 17 00:00:00 2001 From: Sebastian Stenzel Date: Thu, 5 Jun 2025 18:28:54 +0200 Subject: [PATCH 3/3] be more precise [ci skip] --- docs/security/verify-installers.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/security/verify-installers.md b/docs/security/verify-installers.md index 61abd64..3939707 100644 --- a/docs/security/verify-installers.md +++ b/docs/security/verify-installers.md @@ -45,7 +45,7 @@ Our Windows installers are signed using a code signing certificate. You can veri On macOS, you can verify the code signature of the Cryptomator app using the built-in `codesign` utility. This verification confirms the app's authenticity and integrity: 1. Open Terminal (found in Applications > Utilities). -2. Run either of the following commands to check the signature: +2. Run either of the following commands to check the signature of the corresponding file: ``` codesign -dv ~/Downloads/Cryptomator-*.dmg codesign -dv /Applications/Cryptomator.app