Search results for

“codesign”

3,222 results found

Post

Replies

Boosts

Views

Activity

Electron app notarization fails "invalid signature" - local codesign passes
Unable to notarize Electron-based application. All notarization attempts fail with The signature of the binary is invalid for main executable and Electron Framework, despite passing local codesign verification. ENVIRONMENT: macOS: 24.6.0 (Sequoia) Hardware: Apple M4 Max (arm64) electron-builder: 26.0.12 Electron: 36.9.5 (also tested 37.10.2, 38.2.0) Certificate: Developer ID Application: AS LIVE MEDIA SP Z O O Team ID: 2KJ532SU3G Certificate validity: Oct 7 2025 - Oct 8 2030 PROBLEM: Every notarization submission fails with identical error for two binaries: Contents/MacOS/PresentClic Desktop Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework Error message: The signature of the binary is invalid. Architectures affected: Both x86_64 and arm64 CRITICAL CONTRADICTION: ✅ Local verification PASSES: $ codesign --verify --deep --strict PresentClic Desktop.app Result: valid on disk, satisfies Designated Requirement ❌ Apple notarization service FAILS: Error: The signature o
1
0
218
Nov ’25
Reply to Code signature validation failed fatally
@eskimo, thanks for the reply. I tried removing --deep flag while signing and still see below error when I launch the app. Notes: Translocated Process Crashed Thread: 0 Exception Type: EXC_CRASH (SIGABRT) Exception Codes: 0x0000000000000000, 0x0000000000000000 Exception Note: EXC_CORPSE_NOTIFY Termination Reason: DYLD, [0x5] Code Signature Dyld Error Message: Library not loaded: @rpath/***.framework/Versions/A/*** Referenced from: /private/var/folders/*/***.app/Contents/MacOS/*** Reason: no suitable image found. Did find: /private/var/folders/8k/lq520j255vx959w2gz3rl1sw0000gn/T/AppTranslocation/A032D364-17F7-4515-A59C-B9CCBAC0A539/d/***.app/Contents/MacOS/../Frameworks/***.framework/Versions/A/***: code signature invalid for '/private/var/folders/8k/lq520j255vx959w2gz3rl1sw0000gn/T/AppTranslocation/A032D364-17F7-4515-A59C-B9CCBAC0A539/d/***.app/Contents/MacOS/../Frameworks/***.framework/Versions/A/***' And below is my codesign order codesign -s Developer ID Application --options=runtime,libr
Topic: App & System Services SubTopic: Core OS Tags:
May ’23
Xcode 8 can't archive “Command /usr/bin/codesign failed with exit code 1”
✅ Hello, I've got a problem on Xcode 8 on macOS Sierra. when I try to build my app, I get the following issue.CodeSign /Users/me/Library/Developer/Xcode/DerivedData/MyApp-gnoiiwnelmxzdidnijaswisrwdqe/Build/Products/Debug-iphonesimulator/MyApp.appcd /Users/me/Desktop/MyAppFolder1/MyAppFolder2/MyAppxcodeexport CODESIGN_ALLOCATE=/Users/me/Downloads/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocateexport PATH=/Users/me/Downloads/Xcode.app/Contents/Developer/Platforms/iPhoneSimulator.platform/Developer/usr/bin:/Users/me/Downloads/Xcode.app/Contents/Developer/usr/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbinSigning Identity: -/usr/bin/codesign --force --sign - --timestamp=none /Users/me/Library/Developer/Xcode/DerivedData/MyApp-gnoiiwnelmxzdidnijaswisrwdqe/Build/Products/Debug-iphonesimulator/MyApp.app/Users/me/Library/Developer/Xcode/DerivedData/MyApp-gnoiiwnelmxzdidnijaswisrwdqe/Build/Products/Debug-iphonesimulator/MyApp.app: resource fork, Finder information,
16
0
26k
Sep ’16
Reply to Running SimpleTunnel as MacOS app
In terms of the App-to-Per-App VPN Mapping payload array of dictionaries, I was unable to figure out how to obtain the DesignatedRequirement and SigningIdentifier values. You can get these with the codesign tool. For example: $ # DesignatedRequirement $ $ codesign -d --requirements - /Applications/TextEdit.app … designated => identifier com.apple.TextEdit and anchor apple $ $ # SigningIdentifier $ $ codesign -d -v /Applications/TextEdit.app … Identifier=com.apple.TextEdit …Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @apple.com
Jul ’18
Reply to Signing modified binaries
Actually, the hack described in this changelist is working for me: https://github.com/Homebrew/brew/pull/9102/files/4665bb8e663c6d0ef452f4c124742732c96f8fd6#diff-f7b3993a53e62a7bdff250c5b7b176cc03232622c2a3c9912a496a3f82211884 Specifically this: If the codesigning fails, it may be a bug in Apple's codesign utility A known workaround is to copy the file to another inode, then move it back erasing the previous file. Then sign again. # TODO: remove this once the bug in Apple's codesign utility is fixed Dir::Tmpname.create(workaround) do |tmppath| FileUtils.cp file, tmppath FileUtils.mv tmppath, file, force: true end
Topic: App & System Services SubTopic: Core OS Tags:
Feb ’21
Reply to codesign error : unable to build chain to self-signed root for signer
See this post for my general advice on this topic. TomotakaKaneda wrote: % sudo codesign … Do not mix sudo and codesign. Code signing relies heavily on the Security framework and sudo runs the supplied program in a mixed context, where the BSD context is switch and the security context is not. This can cause significant confusion. % sudo codesign --deep … Do not sign code with --deep. See --deep Considered Harmful for an explanation as to why that’s a bad idea. % sudo codesign … --verify … --sign … Doing a verify and a sign in the same command is a recipe for confusing. If you want to verify and sign, or sign and then verify, run codesign twice. Is it correct that the same certificate of login and System Roots coexist in Keychain? As long as you don’t change trust settings (per the post referenced above), having the same certificate in multiple keychains won’t cause problems. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail =
Jul ’22
Unable to Write Files Within App Bundle After Codesigning and Notarization
I have already posted asking about this: [quote='768005021, CynthiaSun, /thread/768005, /profile/CynthiaSun'] Codesigned and notarized app cannot directly write files inside the app bundle... [/quote] But there are still some doubts that have not been answered. We use Qt to develop an application on the macOS platform, and we are attempting to perform code signing and notarization to ensure our the application is trusted by Apple. However, there are a few things that seem weird regarding this statement: App bundles are read-only by design. Let me provide more details. Currently, when our application starts, it needs to create folder (e.g. Temp) in the root directory of the executable For example: Myapp.app/Contents/MacOS/Myapp ---> Myapp.app/Contents/MacOS/Temp The folder is designed for storing runtime logs or config files for our application. In the past, users may also modify the settings inside target folder if needed. However, the strange thing is that after the application is codesigned
2
0
664
Nov ’24
Error occurred during export, Codesign failed
Hello, From last few days I am facing one strange problem while archiving my app using developer id signed. I am getting an error when I try to export archive saying Error occured during export, code sign failed. I am also getting this log in the console signature too large to embed (size limitation of on-disk representation). I also noticed one strange thing, archive export works fine for project written in pure Objective C language and this problem exists for project written in pure swift and objective C + swift mixed language. I also checked provision profile and other certificates, everything is fine (No expired certificates). Can anyone please provide solution for this?Regards,Rohith Nayak
Topic: UI Frameworks SubTopic: AppKit Tags:
9
0
3.5k
Aug ’17
XCFramework codesigning - expired identity behaviour
Xcode 15 introduces a feature where you can see if an XCFramework is signed - (see here) What is the behaviour when the identity expires? For example, do the app developers who have integrated the XCFramework require a brand new XCFramework which is signed with a new, valid identity? Or is there a way to address the expiration without any action from the app developers at all?
1
0
1.2k
Sep ’23
Reply to Intermittent codesign failure when running parallel builds
I'm seeing this same issue, two parallel Jenkins jobs that run xcodebuild and in one CodeSign usually fails with the same output as above. Running the jobs individually never fails. Not using temporary keychains just the login keychain. Not using fastlane either. This looks like some kind of concurrency bug in CodeSign? Anyone have any solution or constructive suggestions? Since there's no crash there's obviously no crash log. Nor is there any console logging from CodeSign
Jun ’21
Electron app notarization fails "invalid signature" - local codesign passes
Unable to notarize Electron-based application. All notarization attempts fail with The signature of the binary is invalid for main executable and Electron Framework, despite passing local codesign verification. ENVIRONMENT: macOS: 24.6.0 (Sequoia) Hardware: Apple M4 Max (arm64) electron-builder: 26.0.12 Electron: 36.9.5 (also tested 37.10.2, 38.2.0) Certificate: Developer ID Application: AS LIVE MEDIA SP Z O O Team ID: 2KJ532SU3G Certificate validity: Oct 7 2025 - Oct 8 2030 PROBLEM: Every notarization submission fails with identical error for two binaries: Contents/MacOS/PresentClic Desktop Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework Error message: The signature of the binary is invalid. Architectures affected: Both x86_64 and arm64 CRITICAL CONTRADICTION: ✅ Local verification PASSES: $ codesign --verify --deep --strict PresentClic Desktop.app Result: valid on disk, satisfies Designated Requirement ❌ Apple notarization service FAILS: Error: The signature o
Replies
1
Boosts
0
Views
218
Activity
Nov ’25
Reply to Code signature validation failed fatally
@eskimo, thanks for the reply. I tried removing --deep flag while signing and still see below error when I launch the app. Notes: Translocated Process Crashed Thread: 0 Exception Type: EXC_CRASH (SIGABRT) Exception Codes: 0x0000000000000000, 0x0000000000000000 Exception Note: EXC_CORPSE_NOTIFY Termination Reason: DYLD, [0x5] Code Signature Dyld Error Message: Library not loaded: @rpath/***.framework/Versions/A/*** Referenced from: /private/var/folders/*/***.app/Contents/MacOS/*** Reason: no suitable image found. Did find: /private/var/folders/8k/lq520j255vx959w2gz3rl1sw0000gn/T/AppTranslocation/A032D364-17F7-4515-A59C-B9CCBAC0A539/d/***.app/Contents/MacOS/../Frameworks/***.framework/Versions/A/***: code signature invalid for '/private/var/folders/8k/lq520j255vx959w2gz3rl1sw0000gn/T/AppTranslocation/A032D364-17F7-4515-A59C-B9CCBAC0A539/d/***.app/Contents/MacOS/../Frameworks/***.framework/Versions/A/***' And below is my codesign order codesign -s Developer ID Application --options=runtime,libr
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
May ’23
Xcode 8 can't archive “Command /usr/bin/codesign failed with exit code 1”
✅ Hello, I've got a problem on Xcode 8 on macOS Sierra. when I try to build my app, I get the following issue.CodeSign /Users/me/Library/Developer/Xcode/DerivedData/MyApp-gnoiiwnelmxzdidnijaswisrwdqe/Build/Products/Debug-iphonesimulator/MyApp.appcd /Users/me/Desktop/MyAppFolder1/MyAppFolder2/MyAppxcodeexport CODESIGN_ALLOCATE=/Users/me/Downloads/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocateexport PATH=/Users/me/Downloads/Xcode.app/Contents/Developer/Platforms/iPhoneSimulator.platform/Developer/usr/bin:/Users/me/Downloads/Xcode.app/Contents/Developer/usr/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbinSigning Identity: -/usr/bin/codesign --force --sign - --timestamp=none /Users/me/Library/Developer/Xcode/DerivedData/MyApp-gnoiiwnelmxzdidnijaswisrwdqe/Build/Products/Debug-iphonesimulator/MyApp.app/Users/me/Library/Developer/Xcode/DerivedData/MyApp-gnoiiwnelmxzdidnijaswisrwdqe/Build/Products/Debug-iphonesimulator/MyApp.app: resource fork, Finder information,
Replies
16
Boosts
0
Views
26k
Activity
Sep ’16
Reply to Running SimpleTunnel as MacOS app
In terms of the App-to-Per-App VPN Mapping payload array of dictionaries, I was unable to figure out how to obtain the DesignatedRequirement and SigningIdentifier values. You can get these with the codesign tool. For example: $ # DesignatedRequirement $ $ codesign -d --requirements - /Applications/TextEdit.app … designated => identifier com.apple.TextEdit and anchor apple $ $ # SigningIdentifier $ $ codesign -d -v /Applications/TextEdit.app … Identifier=com.apple.TextEdit …Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @apple.com
Replies
Boosts
Views
Activity
Jul ’18
Xcode 8 throwing "Command /usr/bin/codesign failed with exit code 1" for Preview created pngs
After upgrading to Xcode 8, a couple of my apps starting throwing Command /usr/bin/codesign failed with exit code 1 errors. I narrowed it down to pngs exported from Preview. Opening and exporting them from GIMP fixed it.
Replies
0
Boosts
0
Views
385
Activity
Oct ’16
Reply to Signing modified binaries
Actually, the hack described in this changelist is working for me: https://github.com/Homebrew/brew/pull/9102/files/4665bb8e663c6d0ef452f4c124742732c96f8fd6#diff-f7b3993a53e62a7bdff250c5b7b176cc03232622c2a3c9912a496a3f82211884 Specifically this: If the codesigning fails, it may be a bug in Apple's codesign utility A known workaround is to copy the file to another inode, then move it back erasing the previous file. Then sign again. # TODO: remove this once the bug in Apple's codesign utility is fixed Dir::Tmpname.create(workaround) do |tmppath| FileUtils.cp file, tmppath FileUtils.mv tmppath, file, force: true end
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Feb ’21
Reply to How to harden a gcc build for notarization
Add --options=runtime to your codesign invocation.
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Mar ’21
Xcode showing issues all the times "Command /usr/bin/codesign failed with exit code 1"
Everytime you guys update something the build will stop working and not even xcode generate ipa or testing and make the app live. Currently I'm facing an issue everytime xcode showing me the following error Command /usr/bin/codesign failed with exit code 1 Please let me know how can i solve it.
Replies
0
Boosts
0
Views
156
Activity
Aug ’20
Reply to Codesign login password
codesign wants too access my certain key in my keychain
Topic: Code Signing SubTopic: General
Replies
Boosts
Views
Activity
Mar ’25
Reply to Command line code signing race condition (?)
Answering my own question for posterity: codesign --verify AppName
Replies
Boosts
Views
Activity
Apr ’23
Reply to codesign error : unable to build chain to self-signed root for signer
See this post for my general advice on this topic. TomotakaKaneda wrote: % sudo codesign … Do not mix sudo and codesign. Code signing relies heavily on the Security framework and sudo runs the supplied program in a mixed context, where the BSD context is switch and the security context is not. This can cause significant confusion. % sudo codesign --deep … Do not sign code with --deep. See --deep Considered Harmful for an explanation as to why that’s a bad idea. % sudo codesign … --verify … --sign … Doing a verify and a sign in the same command is a recipe for confusing. If you want to verify and sign, or sign and then verify, run codesign twice. Is it correct that the same certificate of login and System Roots coexist in Keychain? As long as you don’t change trust settings (per the post referenced above), having the same certificate in multiple keychains won’t cause problems. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail =
Replies
Boosts
Views
Activity
Jul ’22
Unable to Write Files Within App Bundle After Codesigning and Notarization
I have already posted asking about this: [quote='768005021, CynthiaSun, /thread/768005, /profile/CynthiaSun'] Codesigned and notarized app cannot directly write files inside the app bundle... [/quote] But there are still some doubts that have not been answered. We use Qt to develop an application on the macOS platform, and we are attempting to perform code signing and notarization to ensure our the application is trusted by Apple. However, there are a few things that seem weird regarding this statement: App bundles are read-only by design. Let me provide more details. Currently, when our application starts, it needs to create folder (e.g. Temp) in the root directory of the executable For example: Myapp.app/Contents/MacOS/Myapp ---> Myapp.app/Contents/MacOS/Temp The folder is designed for storing runtime logs or config files for our application. In the past, users may also modify the settings inside target folder if needed. However, the strange thing is that after the application is codesigned
Replies
2
Boosts
0
Views
664
Activity
Nov ’24
Error occurred during export, Codesign failed
Hello, From last few days I am facing one strange problem while archiving my app using developer id signed. I am getting an error when I try to export archive saying Error occured during export, code sign failed. I am also getting this log in the console signature too large to embed (size limitation of on-disk representation). I also noticed one strange thing, archive export works fine for project written in pure Objective C language and this problem exists for project written in pure swift and objective C + swift mixed language. I also checked provision profile and other certificates, everything is fine (No expired certificates). Can anyone please provide solution for this?Regards,Rohith Nayak
Topic: UI Frameworks SubTopic: AppKit Tags:
Replies
9
Boosts
0
Views
3.5k
Activity
Aug ’17
XCFramework codesigning - expired identity behaviour
Xcode 15 introduces a feature where you can see if an XCFramework is signed - (see here) What is the behaviour when the identity expires? For example, do the app developers who have integrated the XCFramework require a brand new XCFramework which is signed with a new, valid identity? Or is there a way to address the expiration without any action from the app developers at all?
Replies
1
Boosts
0
Views
1.2k
Activity
Sep ’23
Reply to Intermittent codesign failure when running parallel builds
I'm seeing this same issue, two parallel Jenkins jobs that run xcodebuild and in one CodeSign usually fails with the same output as above. Running the jobs individually never fails. Not using temporary keychains just the login keychain. Not using fastlane either. This looks like some kind of concurrency bug in CodeSign? Anyone have any solution or constructive suggestions? Since there's no crash there's obviously no crash log. Nor is there any console logging from CodeSign
Replies
Boosts
Views
Activity
Jun ’21