Re: developer not verified error

[Mojca Miklavec <mojca.miklavec.lists@gmail.com>]

Dear Alan,

On Fri, 15 Nov 2019 at 22:37, Alan Bowen <bowenalan03@gmail.com> wrote:
>
> Though I was able to download the latest ConTeXt beta without any problems, my attempt to update my ConText-LMTX installation was blocked. The error message was
>
> “mtxrun” cannot be opened because the developer cannot be verified
>
> macOS cannot verify that this app is free from malware.
>
> Safari downloaded this file on April 29, 2019.

Thanks a lot for the report, but I'm tripple-confused now.

First I thought that we would have troubles with the binaries as soon
as GateKeeper was introduced (not sure which macOS version started
causing troubles), but somehow there were none, which at least came as
a pleasant surprise to me. Maybe this has to do with the fact that
anything running inside Terminal has somewhat higher permissions than
regular app bundles. (I know that Audacity doesn't allow recording
unless you run it from the Terminal, for example.)

What confuses me most though is how the beta can work, while lmtx
doesn't. I have an impression that when you download something with
Safari as opposed to downloading with rsync, Safari simply "attaches"
something to the files automatically, marking them as "unsafe", and
unzipping doesn't really help either.

The difference between the usual context distribution and lmtx is that
lmtx usually starts by downloading it from the web (and also
transferring everything in a different way).

>  I am not sure why this is happening and wonder if it would OK to copy mxtrun from my ConTeXt installation and replace the version in my ConTeXt-LMTX installation with it.

I didn't look closely, but if mtxrun is just a symlink to luametatex,
can you maybe try to run

rsync -av \
    rsync://contextgarden.net/builds/luametatex/x86_64-darwinlegacy/luametatex \
    some/local/path/luametatex

to fetch luametatex and try to use that one? (You may try to make
mtxrun a symlink to it, or its copy.)

I'm curious if that will work. I don't yet dare to upgrade to Catalina
(in some ways the OS is worse with each new version).

If it doesn't work, we'll need to figure out how exactly to do the
notarisation (including paying 100 USD per year, which sounds stupid
enough from principle alone), and in any case we need to find a way to
make lmtx work for everyone.

Mojca
___________________________________________________________________________________
If your question is of interest to others as well, please add an entry to the Wiki!

maillist : ntg-context@ntg.nl / http://www.ntg.nl/mailman/listinfo/ntg-context
webpage  : http://www.pragma-ade.nl / http://context.aanhet.net
archive  : https://bitbucket.org/phg/context-mirror/commits/
wiki     : http://contextgarden.net
___________________________________________________________________________________