Hello,
I sign my dmg file with 'codesign -s <myCompany> --deep XXX.dmg', it works and 'codesign --verify --verbose XXX.dmg' even returns the "valid on disk" message.
However, if I send my dmg online and redownload it immediately, 'codesign --verify --verbose XXX.dmg' says "code object is not signed at all". I can resign the dmg as if it had never been signed.
Please, why the **** is the signature lost when the file is moved to another machine and how can I keep it?
This is preventing me to deploy my dmg! I need to send it to the server so people can download & use it!
Thank you for your time,
Regards,
Paul