Certificate revoked?

[avidrissman]

Trying to run Samra, I get a dialog:

Malware Blocked and Moved to Trash

“Samra.app” was not opened because it contains malware. This action did not harm your Mac.

So I asked spctl what was going on:

% spctl --assess Samra.app
Samra.app: CSSMERR_TP_CERT_REVOKED

Certificate revoked? What’s going on there? Given that macOS 26 is coming up soon, and this is one of the few tools that can actually read .car files, it would be great to have it working.

Thanks!

[SoCuul]

I'm guessing this is the case, however when trying to resign the app with an ad-hoc certificate, gatekeeper blocked the app from being opened as well.

I ended up compiling the Xcode project manually, which seemed to produce a working build.

[F1248]

I'm guessing this is the case, however when trying to resign the app with an ad-hoc certificate, gatekeeper blocked the app from being opened as well.

You must ad-hoc sign all executables inside the app:

codesign -s - -f /Applications/Samra.app/Contents/MacOS/__preview.dylib
codesign -s - -f /Applications/Samra.app/Contents/MacOS/Samra
codesign -s - -f /Applications/Samra.app/Contents/MacOS/Samra.debug.dylib

This worked for me.

[SoCuul]

I was able to confirm with NSAntoine that the problem is indeed caused by the certificate expiring, which in turn caused a revocation. Unfortunately it won't be possible for them to upload a newly signed version as they can not currently work on their open source projects.

I've forked the repository and re-built the application using the GitHub actions workflow. You can download the artifact, which should not give you the same error, just open it as you would any unsigned macOS app.

https://github.com/SoCuul/Samra/actions/runs/16399192145

[xhruso00]

I was also shocked today:

x@Mareks-MacBook-Pro-M1 ~ % spctl -a -vv /Applications/Samra.app 
/Applications/Samra.app: CSSMERR_TP_CERT_REVOKED

[nicolasonline]

I was able to confirm with NSAntoine that the problem is indeed caused by the certificate expiring, which in turn caused a revocation. Unfortunately it won't be possible for them to upload a newly signed version as they can not currently work on their open source projects.

I've forked the repository and re-built the application using the GitHub actions workflow. You can download the artifact, which should not give you the same error, just open it as you would any unsigned macOS app.

https://github.com/SoCuul/Samra/actions/runs/16399192145

Just wanted to point out to anyone looking into and who could fall upon this that on macOS 15.7 on an M4 MBP this works perfectly. Thanks a lot for the workaround