title: Signing mac installer (pkgmaker)
body: <p>My installer is created using PackageMaker. After that I codesigned the installer using the following command.</p>
  
  <h1>productsign --sign 'Blah, Inc.' Install.mpkg/ CS/Install.mpkg</h1>
  
  <p>This seem to work pretty well and I could see that it is signed using the following command.</p>
  
  <h1>pkgutil --check-signature Install.mpkg</h1>
  
  <p>Since the certificate is installed on my system in keychain, the installer seem to show a little lock on top right corner. Clicking this opens up the certificate.</p>
  
  <p>If the installer is placed in a system without the certificate installed the lock is no longer seen. However I could still run the command to check for certificate.</p>
  
  <p>1) Is there a graphical way to check for code signing before installing? (I do not want to run command line)</p>
  
  <p>2) I removed a folder from the mpkg file using finder to see if the installer will complain of tampering. But that does not happen. Is there a way the installer can stop install if it is tampered?</p>
  
  <p>3) I also code signed all the binaries in my package (mostly daemons) using xcode's option to use certificate. Again I am able to see the binary as signed, however I do get a message 
  kernel[0]: CODE SIGNING: cs_invalid_page(0x1000): p=224[MyDaemon] clearing CS_VALID.</p>
  
  <p>Googling, I found <a href="http://feedback.photoshop.com/photoshop_family/topics/photoshop_13_0_4_x64_how_can_i_get_rid_of_the_could_not_complete_your_request_because_of_a" rel="nofollow">http://feedback.photoshop.com/photoshop_family/topics/photoshop_13_0_4_x64_how_can_i_get_rid_of_the_could_not_complete_your_request_because_of_a</a> . However I am still not very clear what they are getting at. Could someone help me?</p>