Cmd-R

Check your download

Cmd-R is signed with Lukla Logic LLC's Apple Developer ID certificate and notarized by Apple, so macOS checks it when you open it. To check it yourself, run these in Terminal.

  1. Compare the checksum

    The result should match the SHA-256 below, which is also in SHA256SUMS.

    shasum -a 256 ~/Downloads/Cmd-R-1.0.0.dmg

  2. Ask Gatekeeper

    This checks the signature and Apple's notarization.

    spctl --assess --type open --context context:primary-signature -v ~/Downloads/Cmd-R-1.0.0.dmg

    Expect accepted and source=Notarized Developer ID.

  3. Check who signed the app

    After moving Cmd-R to Applications:

    codesign -dv --verbose=4 /Applications/Cmd-R.app 2>&1 | grep -E "Authority|TeamIdentifier"

    Expect Authority=Developer ID Application: Lukla Logic LLC (T2M99T6Z47).

  4. Compare the certificate

    Optional. Download our signing certificate, pull the certificate out of the app, and compare the two fingerprints with the one below.

    codesign -d --extract-certificates=/tmp/cmd-r /Applications/Cmd-R.app
shasum -a 256 /tmp/cmd-r0 ~/Downloads/LuklaLogic-DeveloperID.cer
Version
Listed here with the first release
DMG SHA-256
Listed here with the first release
Signed by
Developer ID Application: Lukla Logic LLC
Team ID
T2M99T6Z47
Certificate SHA-256
Listed here with the first release