Search results for

codesign

3,114 results found

Post

Replies

Boosts

Views

Activity

Reply to App Groups and macOS 15
Thanks for confirming that. I would expect this to work. When you use an iOS-style app group ID in a Mac Catalyst app, Xcode generates a provisioning profile to authorise that use. So this use falls under case D in App Groups: macOS vs iOS: Fight!. Consider this tiny test app I just created: % codesign -d --entitlements - Debug-maccatalyst/Test766580.app Executable=/Users/quinn/Library/Developer/Xcode/DerivedData/Test766580-beavevigoaauqrfhkfssttblupau/Build/Products/Debug-maccatalyst/Test766580.app/Contents/MacOS/Test766580 [Dict] … [Key] com.apple.security.application-groups [Value] [Array] [String] group.eskimo1.test [Key] com.apple.security.get-task-allow [Value] [Bool] true … % security cms -D -i Debug-maccatalyst/Test766580.app/Contents/embedded.provisionprofile | plutil -p - { … Entitlements => { … com.apple.security.application-groups => [ 0 => group.eskimo1.test ] … } … } Note the presence of com.apple.security.get-task-allow, showing that this is a development build. And that group
Topic: Code Signing SubTopic: Entitlements Tags:
Oct ’24
Reply to "How to" for dext distribution
Thank you both for the responses. We have accomplished the Team Agent request for entitlements for PCI DriverKit - it looks like I am able to perform all other tasks necessary at my admin level on the developer portal. Following ssmith_c's advice, I was able to build, sign, notarize, and deploy a dext within a hosting application, the added export and manual selection seemed to be the difference I needed. However, I'm still encountering some issues with Xcode 15.2 when trying to make a distributable application that works with the dext (#3 of the software types listed above). One worked, and one seemed to not work. The not working one is crashing based on: Exception Type: EXC_CRASH (SIGKILL (Code Signature Invalid)) Exception Codes: 0x0000000000000000, 0x0000000000000000 Termination Reason: CODESIGNING 1 Taskgated Invalid Signature Using codesign to inspect the signature, it seems ok, but I likely am just not seeing the issue: daniek3@MacBook-Pro Project % codesign -dv --verbose=3 A
Oct ’24
"Command CodeSign failed with a nonzero exit code" after enrollment to a development team
Hi all, I have two apple accounts. Stupidly my project is written in Account A and my paid developer account is Account B. When I tried to archive and publish under Account A, it says Team XXX (Personal Team) is not enrolled in the Apple Developer Program. But when I add a team to Account B, Command CodeSign failed with a nonzero exit code. I know it is not the code itself because it runs fine when I use Account A. Just couldn't publish. Any advice? Many many thanks
Topic: Code Signing SubTopic: General
1
0
406
Oct ’24
Reply to Notarization succeeds, but gatekeeper check still fails, with QtWebEngine
I dig into the issue, hence I have 2 executable files in the app under xxx.app/Contents/MacOS: M and N, M is in the Info.plist and is the CFBundleExecutable file, after signed the M with codesign, returns with this: signed app bundle with Mach-O thin (arm64) [CFBundleIdentifier]; otherwise, the N signed with codesign in the same way, returned with this: signed Mach-O thin (arm64) [N]. And I installed the APP on my machine, when I clicked the M executable file, seems it passed the gatekeeper, but I clicked the N, seems the gatekeeper check fails. I am not sure it's the reason.
Topic: Code Signing SubTopic: Notarization Tags:
Oct ’24
Command CodeSign failed with a nonzero exit code
I have not been able to open any of my apps since I uploaded my latest update midOctober 2023. Previously I have tried everything on forums from removing derived data, adding new options in build folder and more. Since then I have wasted hours trying to open any app from my iCloud / hard disk and I wonder if part of the problem is caused by backing up to iCloud, as I can open from an external hard disk. It takes almost as long to upload from hard disk than cloud so whole thing annoying, does this add clues to this frustrating problem ? Also when I opened one of my apps it had made hundreds of unassigned assets that all had to be removed individually. I have no idea how to continue with my work I have three other apps in progress, but am halted at present but such a stupid small detail. // here is full commet /Users/ruwickigmail.com/Desktop/0-APPS-2023/InstaAnimates/InstaAnimates.xcodeproj: warning: Unable to find a target which creates the host product for value of $(TEST_HOST) '/Users/ruwickigmail.com/Deskto
1
0
699
Oct ’24
Notarization succeeds, but gatekeeper check still fails, with QtWebEngine
I am packaging an app with QtWebEngine in it, after codesign the app and the QtWebEngine Framework, the app can run properly. The codesign result is: valid on disk staisfies its Designated requirements Then I notarized and stapled the dmg file, after the dmg installed on Mac, gatekeeper still failed the check. Here is the result for spctl: spctl -a -t open -vvv --context context:primary-signatue Remote Graphics Workstation_.dmg Remote Graphics Workstation_.dmg: rejected source=Insufficient Context Need help to identify the codesign process and the root cause why gatekeeper fail here, thanks.
3
0
725
Oct ’24
Reply to Issues with Embedding Python Interpreter in MacOS App Distributed via TestFlight
Hello, I still get some errors: Process tccd Prompting policy for hardened runtime; service: kTCCServiceAppleEvents requires entitlement com.apple.security.automation.apple-events but it is missing for accessing={TCCDProcess: identifier=com.sampleApp.app, pid=72680, auid=502, euid=502, binary_path=[PATH_TO_APP]]}, requesting={TCCDProcess: identifier=com.apple.appleeventsd, pid=831, auid=55, euid=55, binary_path=/System/Library/CoreServices/appleeventsd}, Process python3.11 flock failed to lock list file (): errno = 35 Basically the changes I made are: Used the code from 'Running a Child Process with Standard Input and Output', it works great, thanks! Made a Run script to sign the executable: codesign -s - -i com.sampleApp.app.Python -o runtime --entitlements $ENTITLEMENTS_PATH -f $BINARY_PATH And then created a copy build phase to place the executable in Executables destination. Code sign on copy is selected. (Verified that it is placed in MacOS folder, and correctly signed.) These are the Entitlemen
Topic: Code Signing SubTopic: Entitlements Tags:
Oct ’24
Issue codesign on VS Code and XCode
Hello, I'm starting to develop a new app with Flutter on VS Code. I. struggle to start because I face constantly this error : Error (Xcode): Target debug_unpack_ios failed: Exception: Failed to codesign /Users/Nylan1/Desktop/Thoughts./Flutter Application/app_v0/app_v0/build/ios/Debug-iphonesimulator/Flutter.framework/Flutter with identity -. Can someone pleas help me to solve that ? I've checked on Xcode and the macOS signing certificate is on Development but the IOS one is not working.
0
0
512
Oct ’24
Issues with Invalid Binary Signatures During macOS Notarization of Electron App
Hello Apple Developer Community, I've been working on notarizing my macOS application, Deep Focus, built using Electron, but I'm encountering persistent issues with binary signatures being reported as invalid during the notarization process. I followed Apple's notarization documentation and ensured that all necessary configurations are in place, but I'm still seeing multiple Invalid errors in the notarization log. Here’s the process I've followed so far: 1. System and Tools Setup: macOS version: Apple M1 Pro Sonoma 14.5 macOS SDK: macOS 15.0 Xcode version: Version 16.0 (16A242d) (Using VSCode instead of XCode since this is an Electron /JavaScript project.) Link to source code for inspection 2. Notarization Process: Successfully stored credentials in Keychain using xcrun notarytool store-credentials. Signed all app components, including frameworks, using the command: for framework in dist/Deep Focus-darwin-arm64/Deep Focus.app/Contents/Frameworks/*.framework; do codesign --force --deep --options runti
2
0
782
Oct ’24
xcodebuild is very slow unless you set CODE_SIGNING_ALLOWED=NO"
Incremental builds using xcodebuild are very slow, around 3x slower when compared to the same build using Xcode. Recently, I discovered that CODE_SIGNING_ALLOWED=NO fixed the issue, but of course, I can't then run iOS app. It seems like automatic signing using xcodebuild is somehow broken. Therefore, I think I could set CODE_SIGNING_ALLOWED=NO and sign it manually later. However, I'm not sure how to do that. I checked what Xcode does and it's: /usr/bin/codesign --force --sign - --entitlements /Users/wkulik/Library/Developer/Xcode/DerivedData/XYZ-hblnhsksxjrctzekqmlevcflnsji/Build/Intermediates.noindex/XYZ.build/Debug-iphonesimulator/XYZ.build/XYZ.app.xcent --timestamp=none --generate-entitlement-der /Users/wkulik/Library/Developer/Xcode/DerivedData/XYZ-hblnhsksxjrctzekqmlevcflnsji/Build/Products/Debug-iphonesimulator/XYZ.app However, if I run xcodebuild with disabled signing I don't have XYZ.app.xcent required by this command. I also tried: codesign --force --deep --sign Apple Development: J
1
0
1.1k
Oct ’24
Reply to Issues with Embedding Python Interpreter in MacOS App Distributed via TestFlight
Hello, thanks a lot for your guidance. This is the error I am facing at the moment, tried some things but I am stuck: Prompting policy for hardened runtime; service: kTCCServiceAppleEvents requires entitlement com.apple.security.automation.apple-events but it is missing for accessing={TCCDProcess: identifier={APP_IDENTIFIER}, pid=63455, auid=502, euid=502, binary_path=[PATH_APP]}, requesting={TCCDProcess: identifier=com.apple.appleeventsd, pid=756, auid=55, euid=55, binary_path=/System/Library/CoreServices/appleeventsd}, What I did since last conversation was to move python libraries to the app and only the python executable is located in the bundle. Python.bundle/Contents Python.bundle/Contents/Info.plist Python.bundle/Contents/MacOS Python.bundle/Contents/MacOS/python3.11 Added to bundle Info.plist: CFBundleExecutable python3.11 Added to Python.entitlements: com.apple.security.inherit, with a Boolean value of true. Python bundle entitlements now looks like this: com.apple.security.app-sandbox com.apple.sec
Topic: Code Signing SubTopic: Entitlements Tags:
Oct ’24
“a sealed resource is missing or invalid” on an installed, notarized application
We have a native ARM64 application. The application is a development environment and native compiler for the language Common Lisp. CL has a foreign function interface, which allows loading of .dylib files into CL and calling functions in them from CL. For this reason, we add certain entitlements. See below. It is notarized and installed on macOS 14.7. When I run spctl on it I get this: $ spctl --assess -v /Applications/AllegroCL64.app /Applications/AllegroCL64.app: rejected (the code is valid but does not seem to be an app) That’s before I run it. Which is odd because the app is notarized. When I run the app, it asks for a license file and installs it into /Applications/AllegroCL64.app/Contents/Resources/ and after that, the spctl shows this: $ spctl --assess -v /Applications/AllegroCL64.app /Applications/AllegroCL64.app: a sealed resource is missing or invalid I assume the mere act of copying the license (a file called devel.lic which is a small text file) is causing this. Why does it say it “does not seem t
7
0
1.3k
Oct ’24
Issues with Embedding Python Interpreter in MacOS App Distributed via TestFlight
Hello Apple Community, many thanks in advance for your help. My macOS app embeds a Python interpreter, compiled from source, including the Python executable and its associated libraries. The top-level app is built with Xcode 16.1 and it's written 100% in Swift6. For test purposes we are running the app on MacOS Sequoia 15.0, 15.1 and Sonoma 14.4. The app can be downloaded via TestFlight and Console app shows the next errors: Crash Reports python3.11 Application Specific Signatures: Unable to get bundle identifier for container id python3: Unable to get bundle identifier because Info.plist from code signature information has no value for kCFBundleIdentifierKey. tccd process error Prompting policy for hardened runtime; service: kTCCServiceAppleEvents requires entitlement com.apple.security.automation.apple-events but it is missing for accessing={TCCDProcess: identifier=[IDENTIFIER]], pid=62822, auid=502, euid=502, binary_path=[PATH TO SAMPLEAPP]]}, requesting={TCCDProcess: identifier=com.apple.appleeventsd, pid
16
0
1.5k
Oct ’24
Reply to Apple Notarization service failing on app that notarized successfully some weeks ago
[quote='808809022, bradleymcgill, /thread/764017?answerId=808809022#808809022, /profile/bradleymcgill'] we are using Maven so I believe this would be the link where the Jar we are getting is from … [/quote] Ta! I downloaded that, unzipped it, and looked at the signature: % codesign -d -vvv --entitlements - jffi-1.3.10-native/jni/Darwin/libjffi-1.2.jnilib … CodeDirectory v=20400 size=1547 flags=0x2(adhoc) hashes=42+2 location=embedded Hash type=sha256 size=32 … That looks reasonable enough. It’s ad hoc signed, which is pretty typical for this sort of thing. It has modern hashes, which is good. And it has no entitlements, which is also good. It also has a reasonable SDK value: % vtool -show-build jffi-1.3.10-native/jni/Darwin/libjffi-1.2.jnilib jffi-1.3.10-native/jni/Darwin/libjffi-1.2.jnilib (architecture x86_64): Load command 8 … version 10.6 sdk 12.0 jffi-1.3.10-native/jni/Darwin/libjffi-1.2.jnilib (architecture arm64): Load command 9 … minos 11.0 sdk 12.0 … Note The Intel deployment target is a bit
Oct ’24