I sign a file with codesign. Verify its signature - says it is correct, but when I gzip and ungzip it, the signature gets removed. Here are the commands I try.
>codesign -s "<identity>" -f -v --timestamp --options runtime example.app
>codesign -v --verbose example.app
example.app: valid on disk example.app: satisfies its Designated Requirement
>gzip example.app
>gunzip example.app.gz
>codesign -v --verbose example.app
example.app: code object is not signed at all
The reason I want to do this, I want to provide codesigning over the network, and for sending it over the network I am planning to archive it so that the signature is retained.
How can I retain the signature if I want to send it over the network?