title: How to check whether an app or dmg is signed or not?
body: <p>I have created app and dmg for a Java application. I am signing as well as verifying dmg and app via codesign. </p>
  
  <p><strong>codesign -s "mycomapany name" myproduct.dmg/myproduct.app</strong></p>
  
  <p>Verifying both using following command -</p>
  
  <p><strong>codesign -v myproduct.dmg/myproduct.app</strong></p>
  
  <p>On executing this command for app and dmg separately it is not giving any message to confirm whether they are signed or not?</p>
  
  <p>Like executing command - <strong>jarsigner -verify -certs myproduct.jar</strong> returns that "<em>jar verified</em>."</p>
  
  <p>How can I verify that dmg and app are signed properly.</p>
  
  <p>Thanks</p>