Home > Mac administration, Mac OS X > 10.7.4 command line installer tool can now install installer packages with expired certificates

10.7.4 command line installer tool can now install installer packages with expired certificates

One of the unpleasant surprises that popped up in March 2012 was that the certificate that Apple embedded in various Apple software installers expired. When using Installer.app, people started getting warnings about the certificate being invalid but were given the option of installing the package anyway.

However, the command line installer tool did not have the option of “certificate invalid, install anyway”. Instead, installations run with the installer tool failed when the installers were signed with expired certificates. This affected all scripts and system management tools that used Apple’s installer tool via the command line to install packages.

Fortunately, as part of the release of Mac OS X 10.7.4 in May 2012, Apple has now released a fix for this by including this new flag among installer‘s various functions.


-allowUntrusted
Allow install of a package signed by an untrusted (or expired) certificate.

The new function worked as advertised when I used it with installer to install an iLife ’11 installer which had expired certificates. Here’s the command I used (-dumplog and -verbose were also included to give me maximum logging to /var/log/install.log):


sudo installer -dumplog -verbose -allowUntrusted -pkg "path/to/iLife.pkg" -target /

  1. Kostas Backas
    May 24, 2012 at 11:39 am

    For repackaged iLife 11 to be used with DeployStudio, do we need to re-create the .pkgs?

    • May 24, 2012 at 5:11 pm

      That would be a good idea. That way, you know exactly what the postflight script is set to do.

  2. October 31, 2012 at 11:29 pm

    I’m a novice at unix commands…when I copied and pasted your command it gave an error about the path to ilife being invalid.

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 148 other followers

%d bloggers like this: