Gatekeeper vs. Leopard: an ongoing tale — Fetch

XCode 4.3 generated designated requirements for Gatekeeper and Developer ID.

[ 1] designated => (
[ 2] anchor apple generic
[ 3] and certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */
[ 4] or
[ 5] anchor apple generic
[ 6] and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */
[ 7] and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */
[ 8] and certificate leaf[subject.OU] = some-developer-id
[ 9] ) [10] and identifier "some-bundle-id""

SOURCE: fetchsoftworks.com

Labels: codesigning, designated requirements, gatekeeper