```
$ rcodesign debug-create-macho exe
assuming default minimum version 11.0.0
writing Mach-O to exe
$ rcodesign sign --pem-source src/testdata/self-signed-rsa-apple-development.pem --signing-time 2023-11-05T10:00:00Z --timestamp-url none exe exe.apple-development
reading PEM data from src/testdata/self-signed-rsa-apple-development.pem
registering signing key
signing exe to exe.apple-development
signing exe as a Mach-O binary
setting binary identifier to exe
parsing Mach-O
creating cryptographic signature with certificate Apple Development: RSA Apple Development (test)
writing Mach-O to exe.apple-development
$ rcodesign extract cms-info exe.apple-development
signed content (embedded): None
signed content (external): Some("fade0c020000013c00020400000000000000009c000000580000000200000005000040102002000c")... (316 bytes)
signed content SHA-1: e1c19ec9ec8c13b3940f8385a8f5f9b56309330a
signed content SHA-256: fbd3393f2015c87653f2ccef69a864fb60985e21d38485b3bb1c7deeb76d825c
signed content SHA-384: 25a7989a6cb024c4d037cd56f0bcfcea0ba4b178362dc4d1694a2080e47d7c63bb178b5a85dfddc9bedf8764ac8d380a
signed content SHA-512: 16db5b4b1ea0529186a760790ce2d2325ea31f3d009eb74a182beb97ac26617e5495bf638d4b79746eee8f469aa991ba3a341af41b46d3b8d59079cf6d376950
certificate count: 1
certificate #0: subject CN=Apple Development: RSA Apple Development (test); self signed=true
signer count: 1
signer #0: digest algorithm: Sha256
signer #0: signature algorithm: RsaSha256
signer #0: content type: 1.2.840.113549.1.7.1
signer #0: message digest: fbd3393f2015c87653f2ccef69a864fb60985e21d38485b3bb1c7deeb76d825c
signer #0: signing time: Some(2023-11-05T10:00:00Z)
signer #0: signature content SHA-1: fc8004e694122f8e134b5e39380392165732f648
signer #0: signature content SHA-256: c07c8319b33e4410d2f6b06ad5344aebbd7a848894f9c5004057cbbe8e17474d
signer #0: signature content SHA-384: 8b53dc40ee48b34eee4c4ba0c2d0fe411929ef4f80e9dbc167cf96c6ef4abd8d633affefffdca0ef6eadc0a055c31827
signer #0: signature content SHA-512: f4cf4a8f0e4de256e07bbfedff1455d50ae05cdbd2d3fec3a12bbc055a1e77d7746b8f1b2bf55fc6380164fda04e1d12d3fd03085b5842f6fb7c5a00348eec84
signer #0: signature valid: true
signer #0: time-stamp token present: false
$ rcodesign extract cms exe.apple-development
SignedData {
digest_algorithms: {
Sha256,
},
signed_content: None,
certificates: Some(
[
CapturedX509Certificate {
original: Ber(308203f7308202dfa003020102020101300d06092a864886f70d01010b050030818c31143012060a0992268993f22c6401010c04746573743138303606035504030c2f4170706c6520446576656c6f706d656e743a20525341204170706c6520446576656c6f706d656e7420287465737429310d300b060355040b0c0474657374311e301c060355040a0c15525341204170706c6520446576656c6f706d656e74310b3009060355040613025553301e170d3233313130373130343932385a170d3337303731363130343932385a30818c31143012060a0992268993f22c6401010c04746573743138303606035504030c2f4170706c6520446576656c6f706d656e743a20525341204170706c6520446576656c6f706d656e7420287465737429310d300b060355040b0c0474657374311e301c060355040a0c15525341204170706c6520446576656c6f706d656e74310b300906035504061302555330820122300d06092a864886f70d01010105000382010f003082010a0282010100e6c9e2a15c321fbad0442e10bebb9824c6319fdaa7afd7c227bda4a81e152b9728855a375e34249f85f4127207a658bc091b447bb499f1f0884eecc98187630200f24c4d08e557624c33a4021ab5528581a92b902b4d436c3033cc27f67242f3eff171ed62f316fc0f138eb927e8d0568aecf11fc519487608509037e1382d81998c12f7b5913dd14bf9c26880bcc270c46b872023f83bdd1ba2395b34d6873ca5ff703dffbce5f561b55361a5a3bd01bfeda19f20b1a6bc89aadffb643d3e8faf2329609e11a587732f85405102de6a2cd76c2f95c95e22dd7af7ae9b8f238d2c60abad0595b3fa9c96b52e9ab95ef7af4596112de6fa5862aebc7aa24fe1fb0203010001a3623060300c0603551d130101ff0402300030160603551d250101ff040c300a06082b06010505070303300e0603551d0f0101ff0404030207803013060a2a864886f763640601020101ff040205003013060a2a864886f7636406010c0101ff04020500300d06092a864886f70d01010b0500038201010099563303c646c61728b9758f16c559e6e1be2eae0884c8535834062b81f21c89a94c89c0ffb25b93b886535749d81e94440f6d257438e07cc701a7e69aa8bdeca71c3d2f686357f842c62a27b045c671b487d89fd3e69458aae19d69274e7b2d54f7f736e25196738185cab05ccd71b4d8a180610e1f771cfeee0198047692ec87fd3a4dbac1db4ff8205ddd7445d6184b11e3ca7018d6a495fa4b44bc1325fdd68050b45dddadf3a9a9ea0575a5b6d7a9d636f052f3b3d79729bf475efc9c95db4154f14d2ae598cb0debd424e0f0bfe59f11668f1e80e52412ae3f722bab026439addcf9a07b81cd17dec724afa51128e092038203c137f602cb154397c05a),
inner: X509Certificate(
Certificate {
tbs_certificate: TbsCertificate {
version: Some(
V3,
),
serial_number: Integer(
b"/x01",
),
signature: AlgorithmIdentifier {
algorithm: 1.2.840.113549.1.1.11,
parameters: Some(
AlgorithmParameter(
[ 05 00 ],
),
),
},
issuer: RdnSequence(
RdnSequence(
[
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 0.9.2342.19200300.100.1.1,
value: 0c0474657374,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.3,
value: 0c2f4170706c6520446576656c6f706d656e743a20525341204170706c6520446576656c6f706d656e7420287465737429,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.11,
value: 0c0474657374,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.10,
value: 0c15525341204170706c6520446576656c6f706d656e74,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.6,
value: 13025553,
},
],
),
],
),
),
validity: Validity {
not_before: UtcTime(
UtcTime(
2023-11-07T10:49:28Z,
),
),
not_after: UtcTime(
UtcTime(
2037-07-16T10:49:28Z,
),
),
},
subject: RdnSequence(
RdnSequence(
[
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 0.9.2342.19200300.100.1.1,
value: 0c0474657374,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.3,
value: 0c2f4170706c6520446576656c6f706d656e743a20525341204170706c6520446576656c6f706d656e7420287465737429,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.11,
value: 0c0474657374,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.10,
value: 0c15525341204170706c6520446576656c6f706d656e74,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.6,
value: 13025553,
},
],
),
],
),
),
subject_public_key_info: SubjectPublicKeyInfo {
algorithm: AlgorithmIdentifier {
algorithm: 1.2.840.113549.1.1.1,
parameters: Some(
AlgorithmParameter(
[ 05 00 ],
),
),
},
subject_public_key: 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 (unused 0),
},
issuer_unique_id: None,
subject_unique_id: None,
extensions: Some(
Extensions(
[
Extension {
id: 2.5.29.19,
critical: Some(
true,
),
value: 3000,
},
Extension {
id: 2.5.29.37,
critical: Some(
true,
),
value: 300a06082b06010505070303,
},
Extension {
id: 2.5.29.15,
critical: Some(
true,
),
value: 03020780,
},
Extension {
id: 1.2.840.113635.100.6.1.2,
critical: Some(
true,
),
value: 0500,
},
Extension {
id: 1.2.840.113635.100.6.1.12,
critical: Some(
true,
),
value: 0500,
},
],
),
),
raw_data: Some("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"),
},
signature_algorithm: AlgorithmIdentifier {
algorithm: 1.2.840.113549.1.1.11,
parameters: Some(
AlgorithmParameter(
[ 05 00 ],
),
),
},
signature: 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 (unused 0),
},
),
},
],
),
signers: [
SignerInfo {
issuer: RdnSequence(
RdnSequence(
[
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 0.9.2342.19200300.100.1.1,
value: 0c0474657374,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.3,
value: 0c2f4170706c6520446576656c6f706d656e743a20525341204170706c6520446576656c6f706d656e7420287465737429,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.11,
value: 0c0474657374,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.10,
value: 0c15525341204170706c6520446576656c6f706d656e74,
},
],
),
RelativeDistinguishedName(
[
AttributeTypeAndValue {
type: 2.5.4.6,
value: 13025553,
},
],
),
],
),
),
serial_number: Integer(
b"/x01",
),
digest_algorithm: Sha256,
signature_algorithm: RsaSha256,
signature: 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,
signed_attributes: Some(
SignedAttributes {
content_type: 1.2.840.113549.1.7.1,
message_digest: fbd3393f2015c87653f2ccef69a864fb60985e21d38485b3bb1c7deeb76d825c,
signing_time: Some(
2023-11-05T10:00:00Z,
),
},
),
digested_signed_attributes_data: Some("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"),
unsigned_attributes: None,
},
],
}
$ rcodesign print-signature-info exe.apple-development
- path: exe.apple-development
file_size: 22544
file_sha256: b79b1797e7e4da470e94c4b4881e1a04dab26e515cf3ecdc69e31cb16f48812d
entity:
mach_o:
macho_linkedit_start_offset: 16384 / 0x4000
macho_signature_start_offset: 16400 / 0x4010
macho_signature_end_offset: 18841 / 0x4999
macho_linkedit_end_offset: 22544 / 0x5810
macho_end_offset: 22544 / 0x5810
linkedit_signature_start_offset: 16 / 0x10
linkedit_signature_end_offset: 2457 / 0x999
linkedit_bytes_after_signature: 3703 / 0xe77
signature:
superblob_length: 2441 / 0x989
blob_count: 3
blobs:
- slot: CodeDirectory (0)
magic: fade0c02
length: 316
sha1: e1c19ec9ec8c13b3940f8385a8f5f9b56309330a
sha256: fbd3393f2015c87653f2ccef69a864fb60985e21d38485b3bb1c7deeb76d825c
- slot: RequirementSet (2)
magic: fade0c01
length: 80
sha1: 4f9d3e687a7622d7209180eeca44e6a4c97a2187
sha256: f48f861e449222d508463e8342afee0c2241817878cab57b21e38e6aea0c08fa
- slot: CMS Signature (65536)
magic: fade0b01
length: 2009
sha1: faa96064b748df76d40c73c847cad6664772324c
sha256: f77bac63ecd33d9a152f4011d5cfefe695682e4dd15da5d89cdb9d8347350404
code_directory:
version: '0x20400'
flags: CodeSignatureFlags(0x0)
identifier: exe
digest_type: sha256
platform: 0
signed_entity_size: 16400
executable_segment_flags: ExecutableSegmentFlags(MAIN_BINARY)
code_digests_count: 5
slot_digests:
- 'Info (1): 0000000000000000000000000000000000000000000000000000000000000000'
- 'RequirementSet (2): f48f861e449222d508463e8342afee0c2241817878cab57b21e38e6aea0c08fa'
code_requirements:
- 'designated(3): 0: (identifier "exe") and (certificate root = H"e1c7216e46533c923b7cfc94e86c7043790b96e9");'
cms:
certificates:
- subject: 'CN=Apple Development: RSA Apple Development (test), OU=test, O=RSA Apple Development, C=US'
issuer: 'CN=Apple Development: RSA Apple Development (test), OU=test, O=RSA Apple Development, C=US'
key_algorithm: RSA
signature_algorithm: SHA-256 with RSA encryption
signed_with_algorithm: SHA-256 with RSA encryption
is_apple_root_ca: false
is_apple_intermediate_ca: false
chains_to_apple_root_ca: false
apple_extended_key_usages:
- Code Signing
apple_code_signing_extensions:
- iPhone Developer
- Mac Developer
apple_certificate_profile: apple-development
apple_team_id: test
signers:
- issuer: 'CN=Apple Development: RSA Apple Development (test), OU=test, O=RSA Apple Development, C=US'
digest_algorithm: SHA-256
signature_algorithm: SHA-256 with RSA encryption
attributes:
- 1.2.840.113549.1.9.3
- 1.2.840.113549.1.9.4
- 1.2.840.113549.1.9.5
- 1.2.840.113635.100.9.1
- 1.2.840.113635.100.9.2
content_type: 1.2.840.113549.1.7.1
message_digest: fbd3393f2015c87653f2ccef69a864fb60985e21d38485b3bb1c7deeb76d825c
signing_time: 2023-11-05T10:00:00Z
cdhash_plist:
- <?xml version="1.0" encoding="UTF-8"?>
- <plist version="1.0">
- ' <dict>'
- ' <key>cdhashes</key>'
- ' <array>'
- ' <data>'
- "/t/t+9M5PyAVyHZT8szvaahk+2CYXiE="
- "/t/t</data>"
- ' </array>'
- ' </dict>'
- </plist>
cdhash_digests:
- - 2.16.840.1.101.3.4.2.1
- fbd3393f2015c87653f2ccef69a864fb60985e21d38485b3bb1c7deeb76d825c
signature_verifies: true
$ rcodesign sign --pem-source src/testdata/self-signed-rsa-apple-distribution.pem --signing-time 2023-11-05T10:00:00Z --timestamp-url none exe exe.apple-distribution
reading PEM data from src/testdata/self-signed-rsa-apple-distribution.pem
registering signing key
signing exe to exe.apple-distribution
signing exe as a Mach-O binary
setting binary identifier to exe
parsing Mach-O
creating cryptographic signature with certificate Apple Distribution: RSA Apple Distribution (test)
writing Mach-O to exe.apple-distribution
$ rcodesign print-signature-info exe.apple-distribution
- path: exe.apple-distribution
file_size: 22544
file_sha256: 81cbb13602e5aa13afd8ba7a2aa20429e13426043660916191318051644d6820
entity:
mach_o:
macho_linkedit_start_offset: 16384 / 0x4000
macho_signature_start_offset: 16400 / 0x4010
macho_signature_end_offset: 18850 / 0x49a2
macho_linkedit_end_offset: 22544 / 0x5810
macho_end_offset: 22544 / 0x5810
linkedit_signature_start_offset: 16 / 0x10
linkedit_signature_end_offset: 2466 / 0x9a2
linkedit_bytes_after_signature: 3694 / 0xe6e
signature:
superblob_length: 2450 / 0x992
blob_count: 3
blobs:
- slot: CodeDirectory (0)
magic: fade0c02
length: 316
sha1: 34fce63175115d3946697622c3c9c258b2fdc82e
sha256: 691a7c16a12d28cca6045028c2b1b56d15cf4e1f679bc2c34ecdb57d346bc244
- slot: RequirementSet (2)
magic: fade0c01
length: 80
sha1: b9d926a29a6b0a414a767d932df464b0ba4015bc
sha256: 93cc24502039c0f7c85f1165b021a7f703793b8d07ce1b71cbb3435c7e4c5d93
- slot: CMS Signature (65536)
magic: fade0b01
length: 2018
sha1: d91ee60ca34d3de9169c7cac3fb4f0dbbfbe1d1e
sha256: 3164953bd2408b70af58b988d4b619f6f68d502d668d4c5787a03a5155f6ac59
code_directory:
version: '0x20400'
flags: CodeSignatureFlags(0x0)
identifier: exe
digest_type: sha256
platform: 0
signed_entity_size: 16400
executable_segment_flags: ExecutableSegmentFlags(MAIN_BINARY)
code_digests_count: 5
slot_digests:
- 'Info (1): 0000000000000000000000000000000000000000000000000000000000000000'
- 'RequirementSet (2): 93cc24502039c0f7c85f1165b021a7f703793b8d07ce1b71cbb3435c7e4c5d93'
code_requirements:
- 'designated(3): 0: (identifier "exe") and (certificate root = H"0383efdf909250708bf2de4d43753836ccb3d608");'
cms:
certificates:
- subject: 'CN=Apple Distribution: RSA Apple Distribution (test), OU=test, O=RSA Apple Distribution, C=US'
issuer: 'CN=Apple Distribution: RSA Apple Distribution (test), OU=test, O=RSA Apple Distribution, C=US'
key_algorithm: RSA
signature_algorithm: SHA-256 with RSA encryption
signed_with_algorithm: SHA-256 with RSA encryption
is_apple_root_ca: false
is_apple_intermediate_ca: false
chains_to_apple_root_ca: false
apple_extended_key_usages:
- Code Signing
apple_code_signing_extensions:
- Apple Mac App Signing (Development)
- Apple Developer Certificate (Submission)
apple_certificate_profile: apple-distribution
apple_team_id: test
signers:
- issuer: 'CN=Apple Distribution: RSA Apple Distribution (test), OU=test, O=RSA Apple Distribution, C=US'
digest_algorithm: SHA-256
signature_algorithm: SHA-256 with RSA encryption
attributes:
- 1.2.840.113549.1.9.3
- 1.2.840.113549.1.9.4
- 1.2.840.113549.1.9.5
- 1.2.840.113635.100.9.1
- 1.2.840.113635.100.9.2
content_type: 1.2.840.113549.1.7.1
message_digest: 691a7c16a12d28cca6045028c2b1b56d15cf4e1f679bc2c34ecdb57d346bc244
signing_time: 2023-11-05T10:00:00Z
cdhash_plist:
- <?xml version="1.0" encoding="UTF-8"?>
- <plist version="1.0">
- ' <dict>'
- ' <key>cdhashes</key>'
- ' <array>'
- ' <data>'
- "/t/taRp8FqEtKMymBFAowrG1bRXPTh8="
- "/t/t</data>"
- ' </array>'
- ' </dict>'
- </plist>
cdhash_digests:
- - 2.16.840.1.101.3.4.2.1
- 691a7c16a12d28cca6045028c2b1b56d15cf4e1f679bc2c34ecdb57d346bc244
signature_verifies: true
$ rcodesign sign --pem-source src/testdata/self-signed-rsa-developer-id-application.pem --signing-time 2023-11-05T10:00:00Z --timestamp-url none exe exe.developer-id-application
reading PEM data from src/testdata/self-signed-rsa-developer-id-application.pem
registering signing key
signing exe to exe.developer-id-application
signing exe as a Mach-O binary
setting binary identifier to exe
parsing Mach-O
creating cryptographic signature with certificate Developer ID Application: RSA Developer ID Application (test)
writing Mach-O to exe.developer-id-application
$ rcodesign print-signature-info exe.developer-id-application
- path: exe.developer-id-application
file_size: 22544
file_sha256: 864799f8d45af41c80c3b93be270f559ece79f88e9aa944f4356eefe2532203a
entity:
mach_o:
macho_linkedit_start_offset: 16384 / 0x4000
macho_signature_start_offset: 16400 / 0x4010
macho_signature_end_offset: 18883 / 0x49c3
macho_linkedit_end_offset: 22544 / 0x5810
macho_end_offset: 22544 / 0x5810
linkedit_signature_start_offset: 16 / 0x10
linkedit_signature_end_offset: 2499 / 0x9c3
linkedit_bytes_after_signature: 3661 / 0xe4d
signature:
superblob_length: 2483 / 0x9b3
blob_count: 3
blobs:
- slot: CodeDirectory (0)
magic: fade0c02
length: 316
sha1: e32c3d89be4bd79a707a6028081ad309d230cd6e
sha256: 5dd2eefc1b66bc80fc4b3f278aa620a5493f048a68627ca4d8f90e2d2f3841d7
- slot: RequirementSet (2)
magic: fade0c01
length: 80
sha1: 6eb37ab943110f6b496aa327c4949c8348ba5456
sha256: 0c0961788fa02751edb6b397dd4f130c78edd4380d0a0ddc397cb69fd1e38efa
- slot: CMS Signature (65536)
magic: fade0b01
length: 2051
sha1: 6a6c3b85d34353dcd7d77ad0188611beebf1380b
sha256: ce9fe441659bdb5e3f65d1fba0e81543445b0c7dc47237e300791b3ddbe31fea
code_directory:
version: '0x20400'
flags: CodeSignatureFlags(0x0)
identifier: exe
digest_type: sha256
platform: 0
signed_entity_size: 16400
executable_segment_flags: ExecutableSegmentFlags(MAIN_BINARY)
code_digests_count: 5
slot_digests:
- 'Info (1): 0000000000000000000000000000000000000000000000000000000000000000'
- 'RequirementSet (2): 0c0961788fa02751edb6b397dd4f130c78edd4380d0a0ddc397cb69fd1e38efa'
code_requirements:
- 'designated(3): 0: (identifier "exe") and (certificate root = H"3acf1d302fe3a4bba06a3c16aadc908045bc9162");'
cms:
certificates:
- subject: 'CN=Developer ID Application: RSA Developer ID Application (test), OU=test, O=RSA Developer ID Application, C=US'
issuer: 'CN=Developer ID Application: RSA Developer ID Application (test), OU=test, O=RSA Developer ID Application, C=US'
key_algorithm: RSA
signature_algorithm: SHA-256 with RSA encryption
signed_with_algorithm: SHA-256 with RSA encryption
is_apple_root_ca: false
is_apple_intermediate_ca: false
chains_to_apple_root_ca: false
apple_extended_key_usages:
- Code Signing
apple_code_signing_extensions:
- Developer ID Application
apple_certificate_profile: developer-id-application
apple_team_id: test
signers:
- issuer: 'CN=Developer ID Application: RSA Developer ID Application (test), OU=test, O=RSA Developer ID Application, C=US'
digest_algorithm: SHA-256
signature_algorithm: SHA-256 with RSA encryption
attributes:
- 1.2.840.113549.1.9.3
- 1.2.840.113549.1.9.4
- 1.2.840.113549.1.9.5
- 1.2.840.113635.100.9.1
- 1.2.840.113635.100.9.2
content_type: 1.2.840.113549.1.7.1
message_digest: 5dd2eefc1b66bc80fc4b3f278aa620a5493f048a68627ca4d8f90e2d2f3841d7
signing_time: 2023-11-05T10:00:00Z
cdhash_plist:
- <?xml version="1.0" encoding="UTF-8"?>
- <plist version="1.0">
- ' <dict>'
- ' <key>cdhashes</key>'
- ' <array>'
- ' <data>'
- "/t/tXdLu/BtmvID8Sz8niqYgpUk/BIo="
- "/t/t</data>"
- ' </array>'
- ' </dict>'
- </plist>
cdhash_digests:
- - 2.16.840.1.101.3.4.2.1
- 5dd2eefc1b66bc80fc4b3f278aa620a5493f048a68627ca4d8f90e2d2f3841d7
signature_verifies: true
$ rcodesign sign --pem-source src/testdata/self-signed-rsa-developer-id-installer.pem --signing-time 2023-11-05T10:00:00Z --timestamp-url none exe exe.developer-id-installer
reading PEM data from src/testdata/self-signed-rsa-developer-id-installer.pem
registering signing key
signing exe to exe.developer-id-installer
signing exe as a Mach-O binary
setting binary identifier to exe
parsing Mach-O
creating cryptographic signature with certificate Developer ID Installer: RSA Developer ID Installer (test)
writing Mach-O to exe.developer-id-installer
$ rcodesign print-signature-info exe.developer-id-installer
- path: exe.developer-id-installer
file_size: 22544
file_sha256: 21c767ead15a921e3e30c767edad0fa427a1d6d2a40b4f441a6887936f50f3d4
entity:
mach_o:
macho_linkedit_start_offset: 16384 / 0x4000
macho_signature_start_offset: 16400 / 0x4010
macho_signature_end_offset: 18866 / 0x49b2
macho_linkedit_end_offset: 22544 / 0x5810
macho_end_offset: 22544 / 0x5810
linkedit_signature_start_offset: 16 / 0x10
linkedit_signature_end_offset: 2482 / 0x9b2
linkedit_bytes_after_signature: 3678 / 0xe5e
signature:
superblob_length: 2466 / 0x9a2
blob_count: 3
blobs:
- slot: CodeDirectory (0)
magic: fade0c02
length: 316
sha1: b1d835487867f475abdf906baacba12f8e4083cc
sha256: b69ec4756395b108b381e8a40969b849986b28ff14ce1f8346e49d16278b093b
- slot: RequirementSet (2)
magic: fade0c01
length: 80
sha1: bbf8d975b30086c19734ae0c52a2f0a296515ab3
sha256: 77c190fb1bb2b3add5411d105d9d306cb5eb4bcb54ec1a7771239bebcc03e54c
- slot: CMS Signature (65536)
magic: fade0b01
length: 2034
sha1: 106fda991c0624264fe46127d92b85ef33dc8ae9
sha256: 0806066e436723014fbf803ba8b465bcde2d39aff1951bee92afa78f623c221e
code_directory:
version: '0x20400'
flags: CodeSignatureFlags(0x0)
identifier: exe
digest_type: sha256
platform: 0
signed_entity_size: 16400
executable_segment_flags: ExecutableSegmentFlags(MAIN_BINARY)
code_digests_count: 5
slot_digests:
- 'Info (1): 0000000000000000000000000000000000000000000000000000000000000000'
- 'RequirementSet (2): 77c190fb1bb2b3add5411d105d9d306cb5eb4bcb54ec1a7771239bebcc03e54c'
code_requirements:
- 'designated(3): 0: (identifier "exe") and (certificate root = H"5c1314a89e5a486ac7b1da86b38e08777adca4af");'
cms:
certificates:
- subject: 'CN=Developer ID Installer: RSA Developer ID Installer (test), OU=test, O=RSA Developer ID Installer, C=US'
issuer: 'CN=Developer ID Installer: RSA Developer ID Installer (test), OU=test, O=RSA Developer ID Installer, C=US'
key_algorithm: RSA
signature_algorithm: SHA-256 with RSA encryption
signed_with_algorithm: SHA-256 with RSA encryption
is_apple_root_ca: false
is_apple_intermediate_ca: false
chains_to_apple_root_ca: false
apple_extended_key_usages:
- Developer ID Installer
apple_code_signing_extensions:
- Developer ID Installer
apple_certificate_profile: developer-id-installer
apple_team_id: test
signers:
- issuer: 'CN=Developer ID Installer: RSA Developer ID Installer (test), OU=test, O=RSA Developer ID Installer, C=US'
digest_algorithm: SHA-256
signature_algorithm: SHA-256 with RSA encryption
attributes:
- 1.2.840.113549.1.9.3
- 1.2.840.113549.1.9.4
- 1.2.840.113549.1.9.5
- 1.2.840.113635.100.9.1
- 1.2.840.113635.100.9.2
content_type: 1.2.840.113549.1.7.1
message_digest: b69ec4756395b108b381e8a40969b849986b28ff14ce1f8346e49d16278b093b
signing_time: 2023-11-05T10:00:00Z
cdhash_plist:
- <?xml version="1.0" encoding="UTF-8"?>
- <plist version="1.0">
- ' <dict>'
- ' <key>cdhashes</key>'
- ' <array>'
- ' <data>'
- "/t/ttp7EdWOVsQizgeikCWm4SZhrKP8="
- "/t/t</data>"
- ' </array>'
- ' </dict>'
- </plist>
cdhash_digests:
- - 2.16.840.1.101.3.4.2.1
- b69ec4756395b108b381e8a40969b849986b28ff14ce1f8346e49d16278b093b
signature_verifies: true
$ rcodesign sign --pem-source src/testdata/self-signed-rsa-mac-installer-distribution.pem --signing-time 2023-11-05T10:00:00Z --timestamp-url none exe exe.mac-installer-distribution
reading PEM data from src/testdata/self-signed-rsa-mac-installer-distribution.pem
registering signing key
signing exe to exe.mac-installer-distribution
signing exe as a Mach-O binary
setting binary identifier to exe
parsing Mach-O
creating cryptographic signature with certificate 3rd Party Mac Developer Installer: RSA Mac Installer Distribution (test)
writing Mach-O to exe.mac-installer-distribution
$ rcodesign print-signature-info exe.mac-installer-distribution
- path: exe.mac-installer-distribution
file_size: 22544
file_sha256: d95e33ec011ce293e9fd0f5b5e14cfe6ce42ecca863a72e50bf7260dab4c577f
entity:
mach_o:
macho_linkedit_start_offset: 16384 / 0x4000
macho_signature_start_offset: 16400 / 0x4010
macho_signature_end_offset: 18923 / 0x49eb
macho_linkedit_end_offset: 22544 / 0x5810
macho_end_offset: 22544 / 0x5810
linkedit_signature_start_offset: 16 / 0x10
linkedit_signature_end_offset: 2539 / 0x9eb
linkedit_bytes_after_signature: 3621 / 0xe25
signature:
superblob_length: 2523 / 0x9db
blob_count: 3
blobs:
- slot: CodeDirectory (0)
magic: fade0c02
length: 316
sha1: 25b36eef594655dc5d3fe2546b8544689dce35a6
sha256: 573b8c4f66ff2bd848f7af75fdb3daba70f38287b93463dfec1e0586f01ea59d
- slot: RequirementSet (2)
magic: fade0c01
length: 80
sha1: 79b9c12819b6a549c8b107dc31a253351ad82e55
sha256: 7d2395bc79aad815504fb0dcca84e5a009ac109a78843d24e8592c48f54388b7
- slot: CMS Signature (65536)
magic: fade0b01
length: 2091
sha1: 2c14a17b4c055b6a56dff68eae8bf9cfb7bfa36c
sha256: 6a3e036f02b15b5117438fce7931b03f3b7b3b2a48bc557ba45be6bb9e364622
code_directory:
version: '0x20400'
flags: CodeSignatureFlags(0x0)
identifier: exe
digest_type: sha256
platform: 0
signed_entity_size: 16400
executable_segment_flags: ExecutableSegmentFlags(MAIN_BINARY)
code_digests_count: 5
slot_digests:
- 'Info (1): 0000000000000000000000000000000000000000000000000000000000000000'
- 'RequirementSet (2): 7d2395bc79aad815504fb0dcca84e5a009ac109a78843d24e8592c48f54388b7'
code_requirements:
- 'designated(3): 0: (identifier "exe") and (certificate root = H"58e39fe0fca55e7af4ca00027bc7c59e566e960a");'
cms:
certificates:
- subject: 'CN=3rd Party Mac Developer Installer: RSA Mac Installer Distribution (test), OU=test, O=RSA Mac Installer Distribution, C=US'
issuer: 'CN=3rd Party Mac Developer Installer: RSA Mac Installer Distribution (test), OU=test, O=RSA Mac Installer Distribution, C=US'
key_algorithm: RSA
signature_algorithm: SHA-256 with RSA encryption
signed_with_algorithm: SHA-256 with RSA encryption
is_apple_root_ca: false
is_apple_intermediate_ca: false
chains_to_apple_root_ca: false
apple_extended_key_usages:
- 3rd Party Mac Developer Installer Packaging Signing
apple_code_signing_extensions:
- Apple Mac App Signing Submission
apple_certificate_profile: mac-installer-distribution
apple_team_id: test
signers:
- issuer: 'CN=3rd Party Mac Developer Installer: RSA Mac Installer Distribution (test), OU=test, O=RSA Mac Installer Distribution, C=US'
digest_algorithm: SHA-256
signature_algorithm: SHA-256 with RSA encryption
attributes:
- 1.2.840.113549.1.9.3
- 1.2.840.113549.1.9.4
- 1.2.840.113549.1.9.5
- 1.2.840.113635.100.9.1
- 1.2.840.113635.100.9.2
content_type: 1.2.840.113549.1.7.1
message_digest: 573b8c4f66ff2bd848f7af75fdb3daba70f38287b93463dfec1e0586f01ea59d
signing_time: 2023-11-05T10:00:00Z
cdhash_plist:
- <?xml version="1.0" encoding="UTF-8"?>
- <plist version="1.0">
- ' <dict>'
- ' <key>cdhashes</key>'
- ' <array>'
- ' <data>'
- "/t/tVzuMT2b/K9hI9691/bPaunDzgoc="
- "/t/t</data>"
- ' </array>'
- ' </dict>'
- </plist>
cdhash_digests:
- - 2.16.840.1.101.3.4.2.1
- 573b8c4f66ff2bd848f7af75fdb3daba70f38287b93463dfec1e0586f01ea59d
signature_verifies: true
```