10.12.3 Combo update failing code sign verification, certificates fail, and mysterious error message from the Mac Store

Apple Care was totally stumped by this problem and I'm not sure where else I'd be able to verify this sort of information.. I'm hoping someone here can help provide some sort of an explanation so I can lower my threat level back to elevated.


I ran codesign -vvv on my download package of macOS Sierra 10.12.3 Combo which returned ".../macosupdcombo10.12.3.dmg: code object is not signed at all"


I immediately reached for the nearest tin foil hat andx proceeded to check it with the only app in the Mac store that verifies code and certificates RB App Checker Lite (side note: it works very well, more people should be using these kinds of assurances). It returned a longer list of issues than I've ever seen before.

User uploaded file


I went back to download it again and some other various updates from the support.apple.com/downloads website the same place I just had downloaded the one above from a few minutes before and was given this error message after the website slowed to a craw land only loaded the page's header:


User uploaded file


I spoke with Apple Care over the phone about all of this and was not given any sort of assistance at all and it seemed like the woman who helped me didn't believe I actually got this from their website. She asked how I did it because we were in a screen sharing session at the time and she could see it was a real webpage linking to Apple which I'm not noticing is cut off from my screenshot.


I tried again 2 later to determine if it was safe to install the software that I just downloaded but 2 hours into me being routed along the chain of command I was transferred to a supervisor who suggested there had been some sort of testing done when in fact there was nothing of the sort, not even a sysdiagnose command in the terminal and I had to even tell them what that is... So now I am still concerned for the authenticity of this update I downloaded from one of the only two official sources, disapointed in their lack of interest in assisting what seems like a potential security issue, and pretty surprised to find out that such attitudes exist.


Can anyone shed some light on all this?


User uploaded file

User uploaded file


The session was ended abruptly which almost didn't seem like legitimate Apple Care behavior and I realize by this point after two hours of typing I could have been a little more understanding of the limitations of his understanding of the operating system but I've never encounctered less than friendly Apple employees. I'm wondering could this have been a faked chat/download/website??

MacBook Pro with Retina display, macOS Sierra (10.12.3)

Posted on Feb 25, 2017 12:31 PM

Reply
26 replies

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

10.12.3 Combo update failing code sign verification, certificates fail, and mysterious error message from the Mac Store

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.