Search results for

“codesign”

3,222 results found

Post

Replies

Boosts

Views

Activity

How to use Xcode server to automate apps to iTC?
Automatically manage signing option in Xcode 8 is working wonderfully. Along with Product / Archive and then with Export to IPA from the Organizer it has freed me from ever worrying about certificates, prov. profiles and everything along with it.Now - is there a possibility to reuse that mechanism with Xcode Server? XCS seems tailored made for the Test integrations with very little thought about the rest of the process.I fail to see how to use the Product / Archive step in XCS with no obvious option to later re-sign with distribution cert/profile and upload to Test Flight and App Store.Can anyone share some tips/scripts for maybe doing Post-integration script step that takes the XCS_PRODUCT or XCS_ARCHIVE env. variables and run codesign and altool CLI tools?I don't want to use fastlane and similar tools which recommend avoiding Automatically manage signing setting. I've read dozen tutorials in last 3-4 days, but nothing that comes close to this.These are few useful web tutorials that gave me some hop
Topic: Developer Tools & Services SubTopic: Xcode Tags:
0
0
602
May ’17
Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)
I am trying to code-sign a desktop application binary for OSX Sierra with bought COMODO certificate. I have a code-signing verification error CSSMERR_TP_NOT_TRUSTED at the end of the command run.This happens when I try to use codesign utility directly on final bundle (I am giving the same certificate ID as the XCode does):+ security unlock-keychain -p $PASSWORD /Users/user/Library/Keychains/login.keychain + export CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate + CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate + /usr/bin/codesign --force --sign 118E862D88E30998B6C4BACB8ABCB1FBDEADBEEF --deep --timestamp=none '<build-path>/app_name' + /usr/bin/codesign --verify '<build-path>/app_name' -dv Executable=<build-path>/app_name/Contents/MacOS/app_name Identifier=$(PRODUCT_BUNDLE_IDENTIFIER) Format=app bundle with Mach-O thin
Topic: Code Signing SubTopic: General Tags:
3
0
2.8k
May ’17
Code Signing Error
I have been trying to run my app that i started making, but everytime i run it tells me Command /usr/bin/codesign failed with exit code 1?!?!So, i searched through the Xcode help, to no avail. Though, i found on developer.apple.com this thing that said you can go to your account at [developer.apple.com/account], and do what is on this screen shot here: But when i go to my account this is what i see:So, what is up with that? Also, can anyone tell me what the error mentioned above means and how i can fix it? That would be a great help, because rightnow my whole project is practically at a stop.☹️
Topic: Developer Tools & Services SubTopic: Xcode Tags:
35
0
10k
May ’17
Proper use of -T with security import
Hey everyone,I'm trying to import a code signing certificate into my keychain on a CI machine. Since Sierra changed the way code signing credentials are handled I'd like to try to make the key available to /usr/bin/codesign (only) by running this command:security import ./cert.p12 -T /usr/bin/codesignbut that does not work. I've also tried the default key type that you get from upon creation without luck.Does anyone know how to achieve this?Thanks,Constantin
Topic: Developer Tools & Services SubTopic: Xcode Tags:
0
0
506
May ’17
Minor code signature issue with iTunes?
After hearing Little Snitch (which I now have to wonder if that's a good idea to use with beta software) complaining that the resource files for iTunes were invalid or modified, I decided to try investigating with codesign in the terminal. It reports the a sealed resource is missing or invalid error, and gives a long list of files that were added to the Contents/Resources folder of the application. I'm not familiar with codesign, but to me it looks like codesign isn't reporting a modification or corruption of existing files- it's just reporting new files that it thinks shouldn't be there.codesign --verify --verbose /Applications/iTunes.app/Applications/iTunes.app: a sealed resource is missing or invalidfile added: /Applications/iTunes.app/Contents/Resources/ar.lproj/RatingCleanMask.pngfile added: /Applications/iTunes.app/Contents/Resources/ar.lproj/RatingCleanMask@2x.pngfile added: /Applications/iTunes.app/Contents/Resources/ar.lproj/RatingExplicitMask.pngfile added: /Applications/i
Topic: App & System Services SubTopic: Core OS Tags:
2
0
477
May ’17
Reply to Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)
Hi Eskimo!Sorry for delayed answer. I might not have clearly expressed it - the COMODO certificate is valid - they claim it is possible to codesign OSX Applications. Furthermore I have compiled and signed the application using this certificate (with XCode) and the Gatekeeper says it looks correct (via spctl command).I would like to do the same using command line tools, but something goes wrong during the process.I see that in sign summary there is no Info.plist 'bounded' (on the contrary to XCode build status). Would it be possible this is the cause? If yes, how to fix that?
Topic: Code Signing SubTopic: General Tags:
May ’17
Reply to Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)
I might not have clearly expressed it - the COMODO certificate is valid - they claim it is possible to codesign OSX Applications. Furthermore I have compiled and signed the application using this certificate (with XCode) and the Gatekeeper says it looks correct (via spctl command).It’s possible to sign code with any digital identity. The issue is whether Gatekeeper will accept it, which I don’t believe it will. I recommend that you do a full end-to-end test with this:Build the appPut it on a serverOn a fresh machine (I typically use a VM for this), download the appRun the downloaded appWill Gatekeeper allow it to run?I just ran this past DTS’s code signing expert and we’re both convinced that Gatekeeper will only allow code to run if it’s signed by an Apple-issued certificate, either from the Mac App Store or via the Developer ID programme.Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @apple.comWWDC runs Mon,
Topic: Code Signing SubTopic: General Tags:
Jun ’17
No valid iOS code signing keys found in keychain
I am working on xamarin forms and I have error not clear for me.I am trying to store token in keychain and I have the below error:No valid iOS code signing keys found in keychain. You need to request a codesigning certificate from https://developer.apple.comHow can I have a codesigning certificate and what are the steps to follow?Regards
Topic: Business & Education SubTopic: General Tags:
0
0
3.6k
Jun ’17
MediaLibrary, what exactly are the signing and entitlement requirements for MediaLibrary and its various classes?
I am working to understand why I can't run an app I created on my own computer for the purpose of testing it.The app is codesigned using my Developer signing certificate. The App Sandbox is enabled, and I have added the Music Folder R/W (and R/O, neither helped).Running the app immediately crashes with the EXC_CRASH (Code Signature Invalid) error.If I remove the entitlements file and disable the sandbox, it gives me the Code=4097 error which appears to be the you didn't sandbox the app error.So what's the trick? What am I missing? What's the deal with there being virtually nothing in the documentation detailing this requirement?
Topic: Media Technologies SubTopic: Audio Tags:
0
0
393
Jun ’17
Revoked certificate
I have accidentally revoked a certificate (the message I got was a revokation for IOS development).But I cannot anymore compile OSX App either.I think I can recreate certificates, but I would need to make sure I understand some points before. And I'm a bit lost by now. And I do't want to cretae problems on the XCode7 that compiles fine.I developed an App on iMac for OSX, with XCode 7.3. I declared No signingI can copy the app on MBP and run.I port the code to XCode8 on MBP.After adfapting to Swift3, with no remaining compile error, when compiling, I get the following error message:CodeSign /Users/XXXXXXXX/Library/Developer/Xcode/DerivedData/YYYYY-hknqslligudgdhdhpwvfhpbtcilk/Build/Products/Debug/YYYYYY.app cd /XXXX/Developpements XCode/ZZZZZZ export CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate Signing Identity: Mac Developer: SSSSSSSSSSSSSSS /usr/bin/codesign --force --sign signature --timestamp=none /Users/claudericaud/Lib
Topic: Developer Tools & Services SubTopic: Xcode Tags:
0
0
1.6k
Jun ’17
Reply to XCode8 signing
Thanks Quincey, because I'm now totally lost with this signing process.So, excuse for the very long post :It works fine in XCode 7, on 2 different Mac, but when I transfered the App to XCode8 on another Mac, I never succeeded to compile : I get codeSign Error at the end.I tried to do as you explain :- Automatically sign- I'm requested to give a Team which I did- No provisionning required- Signing certificate is Mac Developer.Here I have a first question : when I look at signing certificates in XCode Preferences, I have several MacOS Development certificates. - 2 are valid and named MacBookPro de Claude (me): created today when I selecteted + at the bottom of signing certificates window. - 3 are untitled, either revoked or not in keyChain.I also have several Developer ID Application Could this be the cause of the problem ? Should I delete all but one ? How to know which to keep ? If I delete on MacBookPro, I understand it will be deleted on my account. Is there a risk to damage compilation on other ma
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Jun ’17
Reply to XCode8 signing
It can get messy when you turn on automatic signing for an existing project. Automatic signing requires the build settings be set to something neutral, otherwise it thinks you're trying to override the automatic signing. In your case, you got the exactly correct message telling you what to do: go to the build settings for your app target, and choose Mac Developer, which is the first of 3 choices in the Automatic section of the popup menu for the setting. Also do this for any embedded framework targets.Also, if you've added any custom phases to the build that invoke codesign explicitly, delete those build phases.>> The AppName.app: resource fork, Finder information, or similar detritus not allowedIs it possible that at some point you looked at the app bundle's package contents in the Finder? That might have added a .DS_Store file to one of the internal folders. If that's what it is, an Option+Clean Build Folder should solve it.>> I have several MacOS Development certificates … Is there a r
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Jun ’17
codesign --timestamp
I have made a web service (php apache) for building package online.Within the php script, I call a script with exec() to sign the app file.Inside the script.sh I have the codesign command:codesign -f -s ${APP_SIG_NAME} --keychain ${SIGNING_KEYCHAIN} ${out_name}.appand it fails saying: A timestamp was expected but was not found.When I add --timestamp=none, it works and signs the app.When I run my script.sh from terminal it works fine, even without --timestamp=none .The output from Terminal-script.sh without --timestamp=none is different from the output from php-script.sh with --timestamp=none.How can I make codesign to work without --timestamp=none when I call from php script?I tried: Change apache user to admin Use different timestamp serversbut no success.
Topic: Developer Tools & Services SubTopic: Developer Forums Tags:
0
0
2.0k
Jun ’17
Code signing in Xcode?!?!
I am trying to make an app, [i have barely gotten started], but everytime i go to run the thing, it gives me this wacky error: Command /usr/bin/codesign failed with exit code 1....?!?!?! What does this mean, and how can i fix it??Thanks.
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
1
Boosts
0
Views
456
Activity
May ’17
How to use Xcode server to automate apps to iTC?
Automatically manage signing option in Xcode 8 is working wonderfully. Along with Product / Archive and then with Export to IPA from the Organizer it has freed me from ever worrying about certificates, prov. profiles and everything along with it.Now - is there a possibility to reuse that mechanism with Xcode Server? XCS seems tailored made for the Test integrations with very little thought about the rest of the process.I fail to see how to use the Product / Archive step in XCS with no obvious option to later re-sign with distribution cert/profile and upload to Test Flight and App Store.Can anyone share some tips/scripts for maybe doing Post-integration script step that takes the XCS_PRODUCT or XCS_ARCHIVE env. variables and run codesign and altool CLI tools?I don't want to use fastlane and similar tools which recommend avoiding Automatically manage signing setting. I've read dozen tutorials in last 3-4 days, but nothing that comes close to this.These are few useful web tutorials that gave me some hop
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
0
Boosts
0
Views
602
Activity
May ’17
Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)
I am trying to code-sign a desktop application binary for OSX Sierra with bought COMODO certificate. I have a code-signing verification error CSSMERR_TP_NOT_TRUSTED at the end of the command run.This happens when I try to use codesign utility directly on final bundle (I am giving the same certificate ID as the XCode does):+ security unlock-keychain -p $PASSWORD /Users/user/Library/Keychains/login.keychain + export CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate + CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate + /usr/bin/codesign --force --sign 118E862D88E30998B6C4BACB8ABCB1FBDEADBEEF --deep --timestamp=none '<build-path>/app_name' + /usr/bin/codesign --verify '<build-path>/app_name' -dv Executable=<build-path>/app_name/Contents/MacOS/app_name Identifier=$(PRODUCT_BUNDLE_IDENTIFIER) Format=app bundle with Mach-O thin
Topic: Code Signing SubTopic: General Tags:
Replies
3
Boosts
0
Views
2.8k
Activity
May ’17
Code Signing Error
I have been trying to run my app that i started making, but everytime i run it tells me Command /usr/bin/codesign failed with exit code 1?!?!So, i searched through the Xcode help, to no avail. Though, i found on developer.apple.com this thing that said you can go to your account at [developer.apple.com/account], and do what is on this screen shot here: But when i go to my account this is what i see:So, what is up with that? Also, can anyone tell me what the error mentioned above means and how i can fix it? That would be a great help, because rightnow my whole project is practically at a stop.☹️
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
35
Boosts
0
Views
10k
Activity
May ’17
Reply to Code Signing Error
>Command /usr/bin/codesign failed with exit code 1?!?!Far too generic!! - need more info??We're not allowed to see posted screenshots - use your words.
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
Boosts
Views
Activity
May ’17
Proper use of -T with security import
Hey everyone,I'm trying to import a code signing certificate into my keychain on a CI machine. Since Sierra changed the way code signing credentials are handled I'd like to try to make the key available to /usr/bin/codesign (only) by running this command:security import ./cert.p12 -T /usr/bin/codesignbut that does not work. I've also tried the default key type that you get from upon creation without luck.Does anyone know how to achieve this?Thanks,Constantin
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
0
Boosts
0
Views
506
Activity
May ’17
Minor code signature issue with iTunes?
After hearing Little Snitch (which I now have to wonder if that's a good idea to use with beta software) complaining that the resource files for iTunes were invalid or modified, I decided to try investigating with codesign in the terminal. It reports the a sealed resource is missing or invalid error, and gives a long list of files that were added to the Contents/Resources folder of the application. I'm not familiar with codesign, but to me it looks like codesign isn't reporting a modification or corruption of existing files- it's just reporting new files that it thinks shouldn't be there.codesign --verify --verbose /Applications/iTunes.app/Applications/iTunes.app: a sealed resource is missing or invalidfile added: /Applications/iTunes.app/Contents/Resources/ar.lproj/RatingCleanMask.pngfile added: /Applications/iTunes.app/Contents/Resources/ar.lproj/RatingCleanMask@2x.pngfile added: /Applications/iTunes.app/Contents/Resources/ar.lproj/RatingExplicitMask.pngfile added: /Applications/i
Topic: App & System Services SubTopic: Core OS Tags:
Replies
2
Boosts
0
Views
477
Activity
May ’17
Reply to Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)
Hi Eskimo!Sorry for delayed answer. I might not have clearly expressed it - the COMODO certificate is valid - they claim it is possible to codesign OSX Applications. Furthermore I have compiled and signed the application using this certificate (with XCode) and the Gatekeeper says it looks correct (via spctl command).I would like to do the same using command line tools, but something goes wrong during the process.I see that in sign summary there is no Info.plist 'bounded' (on the contrary to XCode build status). Would it be possible this is the cause? If yes, how to fix that?
Topic: Code Signing SubTopic: General Tags:
Replies
Boosts
Views
Activity
May ’17
Reply to Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)
I might not have clearly expressed it - the COMODO certificate is valid - they claim it is possible to codesign OSX Applications. Furthermore I have compiled and signed the application using this certificate (with XCode) and the Gatekeeper says it looks correct (via spctl command).It’s possible to sign code with any digital identity. The issue is whether Gatekeeper will accept it, which I don’t believe it will. I recommend that you do a full end-to-end test with this:Build the appPut it on a serverOn a fresh machine (I typically use a VM for this), download the appRun the downloaded appWill Gatekeeper allow it to run?I just ran this past DTS’s code signing expert and we’re both convinced that Gatekeeper will only allow code to run if it’s signed by an Apple-issued certificate, either from the Mac App Store or via the Developer ID programme.Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @apple.comWWDC runs Mon,
Topic: Code Signing SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jun ’17
No valid iOS code signing keys found in keychain
I am working on xamarin forms and I have error not clear for me.I am trying to store token in keychain and I have the below error:No valid iOS code signing keys found in keychain. You need to request a codesigning certificate from https://developer.apple.comHow can I have a codesigning certificate and what are the steps to follow?Regards
Topic: Business & Education SubTopic: General Tags:
Replies
0
Boosts
0
Views
3.6k
Activity
Jun ’17
MediaLibrary, what exactly are the signing and entitlement requirements for MediaLibrary and its various classes?
I am working to understand why I can't run an app I created on my own computer for the purpose of testing it.The app is codesigned using my Developer signing certificate. The App Sandbox is enabled, and I have added the Music Folder R/W (and R/O, neither helped).Running the app immediately crashes with the EXC_CRASH (Code Signature Invalid) error.If I remove the entitlements file and disable the sandbox, it gives me the Code=4097 error which appears to be the you didn't sandbox the app error.So what's the trick? What am I missing? What's the deal with there being virtually nothing in the documentation detailing this requirement?
Topic: Media Technologies SubTopic: Audio Tags:
Replies
0
Boosts
0
Views
393
Activity
Jun ’17
Revoked certificate
I have accidentally revoked a certificate (the message I got was a revokation for IOS development).But I cannot anymore compile OSX App either.I think I can recreate certificates, but I would need to make sure I understand some points before. And I'm a bit lost by now. And I do't want to cretae problems on the XCode7 that compiles fine.I developed an App on iMac for OSX, with XCode 7.3. I declared No signingI can copy the app on MBP and run.I port the code to XCode8 on MBP.After adfapting to Swift3, with no remaining compile error, when compiling, I get the following error message:CodeSign /Users/XXXXXXXX/Library/Developer/Xcode/DerivedData/YYYYY-hknqslligudgdhdhpwvfhpbtcilk/Build/Products/Debug/YYYYYY.app cd /XXXX/Developpements XCode/ZZZZZZ export CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate Signing Identity: Mac Developer: SSSSSSSSSSSSSSS /usr/bin/codesign --force --sign signature --timestamp=none /Users/claudericaud/Lib
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
0
Boosts
0
Views
1.6k
Activity
Jun ’17
Reply to XCode8 signing
Thanks Quincey, because I'm now totally lost with this signing process.So, excuse for the very long post :It works fine in XCode 7, on 2 different Mac, but when I transfered the App to XCode8 on another Mac, I never succeeded to compile : I get codeSign Error at the end.I tried to do as you explain :- Automatically sign- I'm requested to give a Team which I did- No provisionning required- Signing certificate is Mac Developer.Here I have a first question : when I look at signing certificates in XCode Preferences, I have several MacOS Development certificates. - 2 are valid and named MacBookPro de Claude (me): created today when I selecteted + at the bottom of signing certificates window. - 3 are untitled, either revoked or not in keyChain.I also have several Developer ID Application Could this be the cause of the problem ? Should I delete all but one ? How to know which to keep ? If I delete on MacBookPro, I understand it will be deleted on my account. Is there a risk to damage compilation on other ma
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
Boosts
Views
Activity
Jun ’17
Reply to XCode8 signing
It can get messy when you turn on automatic signing for an existing project. Automatic signing requires the build settings be set to something neutral, otherwise it thinks you're trying to override the automatic signing. In your case, you got the exactly correct message telling you what to do: go to the build settings for your app target, and choose Mac Developer, which is the first of 3 choices in the Automatic section of the popup menu for the setting. Also do this for any embedded framework targets.Also, if you've added any custom phases to the build that invoke codesign explicitly, delete those build phases.>> The AppName.app: resource fork, Finder information, or similar detritus not allowedIs it possible that at some point you looked at the app bundle's package contents in the Finder? That might have added a .DS_Store file to one of the internal folders. If that's what it is, an Option+Clean Build Folder should solve it.>> I have several MacOS Development certificates … Is there a r
Topic: Developer Tools & Services SubTopic: Xcode Tags:
Replies
Boosts
Views
Activity
Jun ’17
codesign --timestamp
I have made a web service (php apache) for building package online.Within the php script, I call a script with exec() to sign the app file.Inside the script.sh I have the codesign command:codesign -f -s ${APP_SIG_NAME} --keychain ${SIGNING_KEYCHAIN} ${out_name}.appand it fails saying: A timestamp was expected but was not found.When I add --timestamp=none, it works and signs the app.When I run my script.sh from terminal it works fine, even without --timestamp=none .The output from Terminal-script.sh without --timestamp=none is different from the output from php-script.sh with --timestamp=none.How can I make codesign to work without --timestamp=none when I call from php script?I tried: Change apache user to admin Use different timestamp serversbut no success.
Topic: Developer Tools & Services SubTopic: Developer Forums Tags:
Replies
0
Boosts
0
Views
2.0k
Activity
Jun ’17