Search results for

codesign

3,114 results found

Post

Replies

Boosts

Views

Activity

VPN on OSX - entitlement is not allowed
I've configured a vpn (packet tunnel) on OSX, but I can't start it because of an entitlement problem(I already did it on iOS, but on OSX it's not running, although the entitlements suppose to work on both iOS and OSX)When I run the app, it's imediatly crashes with the error:... because its use of the com.apple.developer.networking.networkextension entitlement is not allowedaccording to this error, the containing app is not allowed to use the entitlements - but why??But if in the project settings, at the containing app, I remove the path to the entitlement file at Code Signing Entitlements, the app won't crash, but not start the VPN.To check what's the problem, I ran at the terminal codesign -d --entitlements :- CatoClient.appand codesign -d --entitlements :- CatoClientExtension.appexIn both of them I can see<array><string>packet-tunnel-provider</string><string>app-proxy-provider</string><string>content-filter-provider</string></array>Any Help w
5
0
862
Apr ’16
Synchronize iOS and tvOS with Key-Value Storage
Hello,I am using key-value storage to save and synchronize data in iCloud. While this works well for all iOS Devices, Apple TV does not synchronize with the iOS devices.I checked the entitlements file with codesign -d --entitlements :- myApp.app, it is the exact same on the iOS and tvOS app.However, apparently tvOS uses a different container than iOS. Did anyone experience this issue as well? Any help is greatly appreciated! Also, does anybody know how can check the Key-Value-Storage container url at runtime?
1
0
394
Apr ’16
GateKeeper rejects my app in 10.11.4, which was working fine until 10.11.3
I have an app that customers download from the web. This downloaded app was working fine until 10.11.3, my users started seeing an error started with 10.11.4. I havent changed the signing process (or the bundle) between 10.11.3 and 10.11.4. The error that users see is : MyApp can't be opened because the identity of the developer cant be confimed.After a bit of reading about this on Apple developer forums a bit more here are the results:codesign results are successfulcodesign --verbose=4 --deep --strict MyApp.app/InstallForMacOSX.app/: valid on diskInstallForMacOSX.app/: satisfies its Designated RequirementMore details on codesign:codesign -dvvv MyApp.appFormat=bundle with genericCodeDirectory v=20200 size=240 flags=0x0(none) hashes=1+4 location=embeddedSignature size=8926Authority=Apple Root CATimestamp=Apr 13, 2016, 1:00:14 PMInfo.plist entries=2Sealed Resources version=2 rules=12 files=1Internal requirements count=2 size=224spctl returns an error:This is the same error described in other threads.spctl --raw
6
0
2.1k
Apr ’16
Xcode crashes when verifying archive
I realize that this forum is not the place to report bugs. I've already reported this bug via the Apple Bug Reporter. After they asked for additional data (which I immediately supplied) I have not heard anything from Apple in 7 weeks (despite poking them.) I'm hoping someone here has seen this and might be able to suggest a workaround. Without a solution or workaround, I cannot submit my app to the Apple Store.The problem is that when trying to verify or submit the application to the store from the XCode Archive Organizer, XCode 7.3 crashes.The archive organizer goes through a bunch of Processing symbols.... phases followed by a bunch of Codesigning .... steps and then crashes while the display shows Codesigning AppName.app. It's not clear if it is crashing during the Codesigning of AppName.app or if the crash happens immediately after that.If it matters, the app in question is built with GWT, mGWT, and Phonegap/Cordova.Running the application works fine on iOS simulators as well as
1
0
526
Apr ’16
An App ID with Identifier is not available.
I have an existing app with the App ID. I am trying to turn on push notification for it. However, it says An App ID with Identifier is not available.. I tried deleting all certificates and all profiles and starting all over. But I could not get it to work!If I manually setting Code Sign Identity it says No codesigning identities (i.e. certificate and private key pairs) that match your provision profile specified in your built setting were found. If I let it auto-fix it goes back to saying the App ID is not available again.
6
0
18k
Apr ’16
Broken kext Signing? After update of certificates
Hey all,I have an unusual Kext signing issue,it might actually be very simple, but i'm not sure.I create applications and installers for distribution outside of the App store,including a Kext driver for PCI-E device that my company makes.So a while back i signed up for all the appropriate provisioning profiles etc.Including contacting apple to get certified as a proper kernel developer so wecan get our Kext Signed appropriately.Everything was working fine.I recently noticed that Xcode was indicating that the status of my signing identitieswas Revoked I was a bit concerned about this and proceeded to refresh them from withinXcode. Now Xcode lists the following Signing identities: ( Mac only)Mac DevelopmentMac App DistributionMac Installer DistributionDeveloper ID applicationDeveloper ID InstallerAnd a single Provisioning Profile:Mac Team Provisioning Profile: *Building and signing Apps and installers all seems to be fine, but it appears that when I sign my kext driver it is no good?I am signing the Kext projec
2
0
804
Apr ’16
Reply to Broken kext Signing? After update of certificates
1. Do i simply need to contact apple again to get developerID certified for Kext devlopment since i did the renew within XCode?I don’t think so.everything i have read indicates that the Kext cert should be good so long as i maintain my Devloper account?Agreed.First things first, you should check the state of your Developer ID certificate. If that has lost the KEXT ‘magic’ then you just need to fix that problem and there’s no point investigating other potential causes.To do this, first extract the certificate from your built KEXT:$ codesign -d --extract-certificates xxx.kext Executable=…/xxx.kext/Contents/MacOS/xxx $ mv codesign0 codesign0.cerQuick Look codesign0.cer and you should see that the certificate has an extension with the OID 1.2.840.113635.100.6.1.18. Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @apple.com
Topic: App & System Services SubTopic: Core OS Tags:
Apr ’16
Reply to Xcode Server fails to produce installable product
Enviroment:- Mac OS El Captain 10.11.4 (15E65)- Xcode Version 7.3 (7D175)- Mac OS Server Version 5.1 (15S5127)I am struggling with a similiar issue and for me it boils down to two scenarios:- sign the application with App Store Provisioning profile + Key - finishes without issues, no timeout- sign the application with Add Hoc Provisioning profile + Key - times out on codesignWhat actually times out in the end of the buildprocess is this command that creates an .ipa from .xcarchive:xcodebuild -exportArchive -archivePath MyApp.xcarchive -exportPath ExportedProduct -exportOptionsPlist ExportOptions.plist -IDEPostProgressNotifications=YES -DVTAllowServerCertificates=YES -DVTSigningCertificateSourceLogLevel=3 -DVTSigningCertificateManagerLogLevel=3 -DTDKProvisioningProfileExtraSearchPaths=/Library/Developer/XcodeServer/ProvisioningProfiles -configuration ReleaseContent of the ExportOptions.plist is:<?xml version=1.0 encoding=UTF-8?> <!DOCTYPE plist PUBLIC -/ <plist version=1.0> <dict> <key&
Apr ’16
codesign: invalid argument "rce"
Hello,I have codesigned quite a lot of apps in the past, but didn't do it for a while.I codesign via the termial (no Xcode): codesign -s MyCertificateName --deep -force myApp.appNow I get the error: invalid argument rceI don't see, where I used an argument rce and what could be the issue here.Any ideas what is going wrong here?ThanksTiemo
1
0
1.8k
Apr ’16
Reply to NSURLSession with share extension returns -995 on OSX
I'm getting the same error - NSURLErrorBackgroundSessionRequiresSharedContainer - in an OS X share extension that can otherwise access the group container. I dug into this in depth recently (s. 639,346,255) and discovered two potential causes:NSURLSession’s shared session support requires that the group ID (that is, the value in the sharedContainerIdentifier property) be listed in the com.apple.security.application-groups entitlement of both the app and the appex. You can confirm that by dumping the entitlements of these using codesign -d --entitlements :- /path/to/item.IMPORTANT Make sure you dump the entitlements of the appex inside your app, rather than the appex at the top of your build products directory, to avoid any possibility of things changing as Xcode copies the appex into the app.Internally NSURLSession checks these entitlements. There seems to be an issue where the infrastructure that does this check needs read-only access to the app (and the appex nested inside). I found that when I ran
Apr ’16
Reply to OS X 10.11.4 - Gatekeeper issues
I think it could be anything. I had the same problem. it signs fine wirh codesign, but then spctl fails to verify it. I found an app I could sign. Then it was only a matter of time to find a difference. I gradually copied stuff from my app bundle to the good one until it stopped working. The method is simple:codesign -f -s --deep -vvvv my app.appspctl --assess --verbose=4 my app.appreboot (must reboot because spctl remembers the last outcome!)make some changes and start overIn my case, after several hours of doing this, I nailed it down to a benign typo in the Info.plist file. I'm sure this could be lots of other things as well.I wish Apple would provide better error message to diagnose failures.
Topic: Privacy & Security SubTopic: General Tags:
Apr ’16
Is signing of shell script wrapping applications broken in OS X 10.11?
Signing a .app that wraps a shell script using OS X 10.11 fails to verify on 10.10 or below. I can sign on 10.10 and 10.9 and it verifies on 10.9, 10.10 and 10.11.I've put two example apps and a script on [github][1] to show this. The two HelloWorld.app's vary only in the binary in Contents/MacOS/HelloWorld. One is a shell script, the other is compiled objective-c.Signing works and verifies on 10.11 for both versions:Shell Script version: codesign -s ${signing_identity} -v shell-script/HelloWorld.app signed bundle with generic [liamsharp.helloworld] codesign -vv shell-script/HelloWorld.app shell-script/HelloWorld.app: valid on disk shell-script/HelloWorld.app: satisfies its Designated RequirementObjective-C version: codesign -s ${signing_identity} -v objective-c/HelloWorld.app signed bundle with Mach-O thin (x86_64) [liamsharp.helloworld] codesign -vv objective-c/HelloWorld.app objective-c/HelloWorld.app: valid on disk objective-c/HelloWorld.app: satisfies its Designated Re
0
0
874
Apr ’16
Invalid Signature, reissued many times
I'm trying to update an app. It's acceptted by the Application Loader but soon afterwards I get an email that says:Invalid Signature - The binary with bundle identifier 'com.velocedge.hypothesistesting' at path [Hypothesis.app] contains an invalid signature. Make sure you have signed your application with a distribution certificate, not an ad hoc certificate or a development certificate.I've revoked my distribution certificates, recreated them and the distribution mobileprofile, yet I keep getting the message. I used codesign to see what's inside the app and got the following. From what I can tell, they look like distribution to me but I don't really know what I'm looking at.$ codesign -dvvv Hypothesis.app/Executable=/Users/macuser/Desktop/certificates/Velocedge/Payload/Hypothesis.app/HypothesisIdentifier=com.velocedge.hypothesistestingFormat=bundle with Mach-O universal (armv7 arm64)CodeDirectory v=20001 size=92276 flags=0x0(none) hashes=4605+5 location=embeddedHash type=sha1 size=20CDHash=
5
0
1.9k
May ’16
Signing a Widget?
Hey,I just got my Developer ID. I've developed a dashboard widget, but I have no idea how to sign it. It's a .wdgt package, that contains the plist.info in its root. How do I get the certificate? Do I need to sign it with Xcode or something? Or, do I use codesign from the command prompt - and how do I do that?Cheers,Taylor
1
0
1.2k
May ’16