macoscodesign

How can I tell who code signed an OS X app?


On Windows, I can right-click a file and see who code signed it on the "Digital Signatures" tab of the Properties dialog. Is there a similar way to see which publisher signed an OS X app, or details about the certificate used to sign it?

I know I can run codesign -d -r- appname.app to see details about the certificate, and codesign -vvvv appname.app to see whether it passes validation, but neither of those shows me anything about the actual certificate or publisher who signed it, just the one in the bundle identifier for the app.


Solution

  • Use

    $ codesign -dvvv the.app

    And look to the Authority fields such as

    Authority=Adobe Systems, Incorporated

    However, apps distributed on the Mac App Store are all signed by Apple's certificate:

    Authority=Apple Mac OS Application Signing