New Plex Mac App Update is not Code Signed

Plex Players Desktop Players
1

Server Version#: 1.16.5.1488
Player Version#: 1.1.0.831-e1ae73b1

My firewall (LittleSnitch) just reported that the new Mac Player is not code signed after being updated and asked that I block all of the traffic from the app. Will this be fixed in a new update?

Verification failure for “Plex” and success for “Notes” shared below:

computer:~ user$ codesign -dv --verbose=4 /Applications/Plex.app
/Applications/Plex.app: code object is not signed at all
computer:~ user$ codesign -dv --verbose=4 /Applications/Notes.app
Executable=/Applications/Notes.app/Contents/MacOS/Notes
Identifier=com.apple.Notes
Format=app bundle with Mach-O thin (x86_64)
CodeDirectory v=20100 size=28640 flags=0x0(none) hashes=888+5 location=embedded
Platform identifier=7
VersionPlatform=1
VersionMin=658944
VersionSDK=658944
Hash type=sha256 size=32
CandidateCDHash sha256=337f7027e2ec4424dc3ae52ec770549078835c1a
Hash choices=sha256
Page size=4096
CDHash=337f7027e2ec4424dc3ae52ec770549078835c1a
Signature size=4485
Authority=Software Signing
Authority=Apple Code Signing Certification Authority
Authority=Apple Root CA
Info.plist entries=39
TeamIdentifier=not set
Sealed Resources version=2 rules=13 files=1885
Internal requirements count=1 size=64
1 Like
2

@wingcomm thanks for the heads up. We’re looking into this.

1 Like
3

Confirmed. This is the 1.1 Plex.app straight out of the DMG:

MacBook-Pro:Downloads mattwork$ codesign -dv --verbose=4 ./Plex.app/
Executable=/Users/mattwork/Downloads/Plex.app/Contents/MacOS/Plex
Identifier=tv.plex.desktop
Format=app bundle with Mach-O thin (x86_64)
CodeDirectory v=20200 size=5871 flags=0x0(none) hashes=178+3 location=embedded
VersionPlatform=1
VersionMin=657664
VersionSDK=658944
Hash type=sha256 size=32
CandidateCDHash sha1=5a938fad34a175103a0914f8680bc5bdb25346eb
CandidateCDHash sha256=4888e135e08c7f6b3a019295dde5bea030d387f3
Hash choices=sha1,sha256
Page size=4096
CDHash=4888e135e08c7f6b3a019295dde5bea030d387f3
Signature size=8999
Authority=Developer ID Application: Plex Inc. (K4QJ56KR4A)
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=Aug 19, 2019 at 6:19:18 PM
Info.plist entries=18
TeamIdentifier=K4QJ56KR4A
Sealed Resources version=2 rules=13 files=1087
Internal requirements count=1 size=64

This is the 1.1 app after updating from 1.0:

MacBook-Pro:Downloads mattwork$ codesign -dv --verbose=4 /Applications/Plex.app
/Applications/Plex.app: code object is not signed at all

Thanks for your report!

4

@deactivated,

Thank you for looking into this.

I just updated to Version 1.2.0.875-b7362913 and it still appears to not be signed.

5

Correct. It’s in process; I expect there will be an announcement or note in the release notes when the signed version is ready.

6

@wingcomm this is fixed in 1.3.0.

1 Like
7

@deactivated, Thank you for the update. It does appear to be fixed. As it turns out, the QNAP package seems to have lost its signature…I’ll create a separate thread.

8

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.