Search results for

“codesign”

3,221 results found

Post

Replies

Boosts

Views

Activity

Can I use xcodebuild to build an archive without signing it with xcode?
I am building an IOS app for another company.I was using xcode 7 and was able to use xcodebuild to build an unsigned archive which I was able to give to the customer who would then use it to generate their app signed with their own id.It seems that with xcode 9 I now need to sign the archive. I think I could still do this with wild card developer id but the problem is that the app has group entitlements which are not allowed in wildcard ids.I do not want to have to have customers provide me with their codesigning certificates and provisioning files.This is the command line I use to use as part of a script run by Jenkins:xcodebuild archive -project <my_project> -scheme <my_sheme> -configuration Release -archivePath <my_archive_path> OTHER_CODE_SIGN_FLAGS='--keychain /Users/me/Library/Keychains/Buildsystem' CODE_SIGN_ENTITLEMENTS=/Users/me/entitlements.plist CODE_SIGN_IDENTITY= CODE_SIGNING_REQUIRED=NO HEADERMAP_INCLUDES_PROJECT_HEADERS=NO USE_HEADERMAP=NOThe provisioning file I was u
3
0
21k
Jan ’18
Reply to Problem with Data Protection and NSFileProtectionCompleteUntilFirstUserAuthentication
Is this just a problem with the Xcode warning? Or is the resulting app built incorrectly? That is, if you dump the entitlements and embedded provisioning profile of the built app, does it have the com.apple.developer.default-data-protection entitlement set correctly in both places? To can dump these as follows:$ codesign -d --entitlements :- TestDF95757.app … <plist version=1.0> <dict> … <key>com.apple.developer.default-data-protection</key> <string>NSFileProtectionComplete</string> … </dict> </plist> $ security cms -D -i TestDF95757.app/embedded.mobileprovision … <plist version=1.0> <dict> … <key>Entitlements</key> <dict> … <key>com.apple.developer.default-data-protection</key> <string>NSFileProtectionComplete</string> </dict> … </dict> </plist>Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @
Topic: Privacy & Security SubTopic: General Tags:
Jan ’18
codesign, timestamping: what IP address _range_ does Apple use to provide timestamp.apple.com service?
Our automatic signing system runs in an isolated network having tightly restricted connectivity, just to timestamping and some other necessary services. Timestamping occasionally fails when the IP addresses change. Configuring the IP address range for this in our firewall could increase the robustness of our internal code signing service.
5
0
5.7k
Jan ’18
Reply to Is it possible to flag macOS Command line tools for NEAppProxyProvider VPN?
HI Quinn,It does not work even after bundling it. I codesigned the tool with the same bundle id of the containing application and launched the tool via terminal but no success. Looks like there is no way to get this work then.Also, if you are aware of any such alternative please let us know. As we can not flag Terminal to use per-app VPN due to com.apple bundle ID restriction, we were trying some alternatives with this approach.Regards,Sanjay.
Feb ’18
ARKitImageRecognition
I'm trying to run the sample code provided by Apple. I'm getting:/Users/me/Library/Developer/Xcode/DerivedData/ARKitImageRecognition-dbzdmsowoqmsaqejorbxkompvdfl/Build/Products/Debug-iphoneos/ARKitImageRecognition.app/Frameworks/libswiftARKit.dylib: unknown error -1=ffffffffffffffff error: Task failed with exit 1 signal 0 { /usr/bin/codesign '--force' '--sign' '02832D01E3EA1AF5F65ED0EB4934262B31E2FDDB' '--verbose' '/Users/me/Library/Developer/Xcode/DerivedData/ARKitImageRecognition-dbzdmsowoqmsaqejorbxkompvdfl/Build/Products/Debug-iphoneos/ARKitImageRecognition.app/Frameworks/libswiftARKit.dylib'I thought it might be DerivedData, but I've dumped that. Tried restarting. This error persists. Help?
0
0
486
Feb ’18
MAS distribution pkg got rejected during review process
Hi guys!I have an issue with review process in Mac App StoreApp was developed using Electron.I have done everything according to their instructions.I got .app and .pkg files.This package could not be loaded though Application Loader with errorERROR ITMS-90287: Invalid Code Signing Entitlements. The entitlements in your app bundle signature do not match the ones that are contained in the provisioning profile. The bundle contains a key that is not included in the provisioning profile: 'com.apple.developer.team-identifier' in 'xxxxxx/Payload/xxxxxxxx.app/Contents/MacOS/Xxxxxxx'.If I resign App with next scriptsign.sh#!/bin/bash APP=XXXXXXXXX APP_PATH=install/mas/Xxxxxxxxx.app RESULT_PATH=AppStore/$APP.pkg APP_KEY=3rd Party Mac Developer Application: XXXXXXXXXX (XXXXXXXXXXXXX) INSTALLER_KEY=3rd Party Mac Developer Installer: XXXXXXXXX (XXXXXXXXXXX) CHILD_PLIST=plists/child.plist PARENT_PLIST=plists/parent.plist LOGINHELPER_PLIST=plists/loginhelper.plist FRAMEWORKS_PATH=$APP_PATH/Contents/Frameworks codesign
0
0
1.4k
Feb ’18
Reply to copy on code sign, where does version come from?
I'm hitting the same problem as StarGazerI. I have a private framework that just has a single version of 1. Xcode throws an error while trying to sign Versions/A, which does not exist. This happens when Code Sign On Copy is checked in a Copy Files Build Phase.If I copy the failing codesign command and run it in Terminal on the same framework, it works if I use:/usr/bin/codesign --force --sign mykey --preserve-metadata=identifier,entitlements,flags --timestamp=none /Users/karl/Library/Developer/Xcode/DerivedData/CreateInstance-fzlvjftxqybywnftwjerjoginndb/Build/Products/Debug/foo.framework/Versions/1or/usr/bin/codesign --force --sign mykey --preserve-metadata=identifier,entitlements,flags --timestamp=none /Users/karl/Library/Developer/Xcode/DerivedData/CreateInstance-fzlvjftxqybywnftwjerjoginndb/Build/Products/Debug/foo.frameworkIt seems that Xcode is intent on expecting a Version/A in the framework, which is not strictly required according to the various Frameworks and codesign
Topic: Code Signing SubTopic: General Tags:
Feb ’18
Developing MacOS Apps with Adobe Air + codesign = resource fork, Finder information, or similar detritus not allowed
Hi,I'm developing macOS Apps using Adobe Air. This used t owork quite well! Now I've finished a new macOS App and I'm trying to use my old script (which always worked before) but it seems Apple changed something.When I use this script in Terminal:cd /Users/essig/Desktopcp MacProcess/Info.plist Europa meistern.app/Contents/Info.plistcp MacProcess/Icon.icns Europa meistern.app/Contents/Resources/Icon.icnschmod -R 777 Europa meistern.appcodesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIR_64 Helpercodesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIR_64codesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIRcodesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/MacOS/Europa meisternc
1
0
1.3k
Feb ’18
Reply to Developing MacOS Apps with Adobe Air + codesign = resource fork, Finder information, or similar detritus not allowed
Good morning,I received some great hints from a friend and I guess I´m close do fix this issue.After publishing the macOS App from Animate CC / Adobe Air (27.0.0.116) I opened the .app (Control Click on the .app file and select 'Show Package Contents‘).- In the Contents/Resources folder I replaced the Icon.icns file with my own.- Additions to the Info.plist <key>LSApplicationCategoryType</key> <string>public.app-category.education</string> <key>CFBundleVersion</key> <string>1.0.0</string>Then I deleted these Files from the Package:- webkit .dylib file at Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib- Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR.vch - Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin- Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/_MACOSX (the entire folder)Then I used this code in Terminal for signing the App: cd /Users/essig/Desktopchmod -
Feb ’18
Xcode New Build System codesign error
I switched a project to the New Build System to see what it was like. The result was not good. My app is created, but fails upon launch due to a codesign error. What is strange is that codesign says all is OK. Also, switching back to the default build system resolves the issue.$ codesign -dv old-build-system/GeoTag.app (copied the build folder to the desktop to compare with the new build system code) Executable=/Users/marc/Desktop/Build/Products/Debug/GeoTag.app/Contents/MacOS/GeoTag Identifier=org.snafu.GeoTag Format=app bundle with Mach-O thin (x86_64) CodeDirectory v=20200 size=4752 flags=0x0(none) hashes=141+5 location=embedded Signature size=4685 Signed Time=Feb 23, 2018 at 4:48:01 PM Info.plist entries=28 TeamIdentifier=A3UXBEBE8Z Sealed Resources version=2 rules=13 files=242 Internal requirements count=1 size=176$ codesign -dv new-build-system/GeoTag.app Executable=/Users/marc/Library/Developer/Xcode/DerivedData/GeoTag-aqjdodmrxrygnggelbxhetiiwrcm/Build/Products/Debu
4
0
1.4k
Feb ’18
unable to build chain to self-signed root for signer
Hello - I have a membership as an Apple Developer - I have been deploying and testing apps for some time and suddenly I am getting a code signing error. I am not sure what has changed? I have tried numerous solution/suggestion on the forum with no luck. -I have deleted the KeyChain access certificates and re-created via xcode. I have looked at the immediate and root certificates but not sure which ones I need - tried a number of them. I did register an app in the iTunesConnect to begin the process of submiting for approval - but that shouldn't impact my development workflow when deploying to phone? Any guidance is much appreciated.Warning: unable to build chain to self-signed root for signer iPhone Developer: Name (xxxxxxxxxxxxx)/Users/Name/Library/Developer/Xcode/DerivedData/Unity-iPhone-ctglawntjuiiaacqkcyropceltlb/Build/Products/ReleaseForRunning-iphoneos/AppTestName.app: unknown error -1=ffffffffffffffffCommand /usr/bin/codesign failed with exit code 1Thank you!
1
0
1.8k
Mar ’18
Reply to Why is my MacBook Pro's Touchbar blocking port 3000?
/usr/local/touch/MultiTouchPlatformHelper isn’t an Apple thing; on a fresh install of macOS 10.13, /usr/local/ is empty: $ ls -lh /usr/local/ $You’ll need to track down how that software got installed and talk with its author. You might be able to make some headway by dumping the code signature of the program. For example, on my day-to-day work machine I have the BBEdit tools installed, and I see this:$ codesign -d -vv /usr/local/bin/bbedit Executable=/MyApplications/BBEdit.app/Contents/Helpers/bbedit_tool Identifier=com.barebones.bbedit-tool Format=Mach-O thin (x86_64) CodeDirectory v=20200 size=473 flags=0x0(none) hashes=10+2 location=embedded Signature size=4630 Authority=Developer ID Application: Bare Bones Software, Inc. (W52GZAXT98) Authority=Developer ID Certification Authority Authority=Apple Root CA Signed Time=13 Feb 2018 at 18:07:30 Info.plist entries=17 TeamIdentifier=W52GZAXT98 Sealed Resources=none Internal requirements count=1 size=220Share and Enjoy — Quinn “The Eskimo!” Apple Develop
Mar ’18
Keychain access prompt on app upgrade
I have an app that adds some items to the keychain. I've noticed recently that when upgrading the app, the system pops up the allow access to this keychain item dialog when it attempts to read a keychain item that was added by the previous version. This app is codesigned and passes all codesign diagnostics. Did something change recently that causes this permission request to pop up even though the both versions of the app are signed with the exact same certificate.I will state that the app is not signed with a Developer ID Application certificate but with a valid code signing certificate from a non-Apple CA. Is there some new requirement that a Developer ID Application certificate must be used in order to not see this prompt when an app is upgraded?I dumped the keychain using security dump-keychain -a before and after upgrade and the only difference between the item is that the partition_id entry contains an additional cdhash for the new app. From what I understand cdhash will change when th
5
0
887
Mar ’18
Can I use xcodebuild to build an archive without signing it with xcode?
I am building an IOS app for another company.I was using xcode 7 and was able to use xcodebuild to build an unsigned archive which I was able to give to the customer who would then use it to generate their app signed with their own id.It seems that with xcode 9 I now need to sign the archive. I think I could still do this with wild card developer id but the problem is that the app has group entitlements which are not allowed in wildcard ids.I do not want to have to have customers provide me with their codesigning certificates and provisioning files.This is the command line I use to use as part of a script run by Jenkins:xcodebuild archive -project <my_project> -scheme <my_sheme> -configuration Release -archivePath <my_archive_path> OTHER_CODE_SIGN_FLAGS='--keychain /Users/me/Library/Keychains/Buildsystem' CODE_SIGN_ENTITLEMENTS=/Users/me/entitlements.plist CODE_SIGN_IDENTITY= CODE_SIGNING_REQUIRED=NO HEADERMAP_INCLUDES_PROJECT_HEADERS=NO USE_HEADERMAP=NOThe provisioning file I was u
Replies
3
Boosts
0
Views
21k
Activity
Jan ’18
Reply to Problem with Data Protection and NSFileProtectionCompleteUntilFirstUserAuthentication
Is this just a problem with the Xcode warning? Or is the resulting app built incorrectly? That is, if you dump the entitlements and embedded provisioning profile of the built app, does it have the com.apple.developer.default-data-protection entitlement set correctly in both places? To can dump these as follows:$ codesign -d --entitlements :- TestDF95757.app … <plist version=1.0> <dict> … <key>com.apple.developer.default-data-protection</key> <string>NSFileProtectionComplete</string> … </dict> </plist> $ security cms -D -i TestDF95757.app/embedded.mobileprovision … <plist version=1.0> <dict> … <key>Entitlements</key> <dict> … <key>com.apple.developer.default-data-protection</key> <string>NSFileProtectionComplete</string> </dict> … </dict> </plist>Share and Enjoy — Quinn “The Eskimo!” Apple Developer Relations, Developer Technical Support, Core OS/Hardware let myEmail = eskimo + 1 + @
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Jan ’18
codesign, timestamping: what IP address _range_ does Apple use to provide timestamp.apple.com service?
Our automatic signing system runs in an isolated network having tightly restricted connectivity, just to timestamping and some other necessary services. Timestamping occasionally fails when the IP addresses change. Configuring the IP address range for this in our firewall could increase the robustness of our internal code signing service.
Replies
5
Boosts
0
Views
5.7k
Activity
Jan ’18
Reply to Is it possible to flag macOS Command line tools for NEAppProxyProvider VPN?
HI Quinn,It does not work even after bundling it. I codesigned the tool with the same bundle id of the containing application and launched the tool via terminal but no success. Looks like there is no way to get this work then.Also, if you are aware of any such alternative please let us know. As we can not flag Terminal to use per-app VPN due to com.apple bundle ID restriction, we were trying some alternatives with this approach.Regards,Sanjay.
Replies
Boosts
Views
Activity
Feb ’18
ARKitImageRecognition
I'm trying to run the sample code provided by Apple. I'm getting:/Users/me/Library/Developer/Xcode/DerivedData/ARKitImageRecognition-dbzdmsowoqmsaqejorbxkompvdfl/Build/Products/Debug-iphoneos/ARKitImageRecognition.app/Frameworks/libswiftARKit.dylib: unknown error -1=ffffffffffffffff error: Task failed with exit 1 signal 0 { /usr/bin/codesign '--force' '--sign' '02832D01E3EA1AF5F65ED0EB4934262B31E2FDDB' '--verbose' '/Users/me/Library/Developer/Xcode/DerivedData/ARKitImageRecognition-dbzdmsowoqmsaqejorbxkompvdfl/Build/Products/Debug-iphoneos/ARKitImageRecognition.app/Frameworks/libswiftARKit.dylib'I thought it might be DerivedData, but I've dumped that. Tried restarting. This error persists. Help?
Replies
0
Boosts
0
Views
486
Activity
Feb ’18
MAS distribution pkg got rejected during review process
Hi guys!I have an issue with review process in Mac App StoreApp was developed using Electron.I have done everything according to their instructions.I got .app and .pkg files.This package could not be loaded though Application Loader with errorERROR ITMS-90287: Invalid Code Signing Entitlements. The entitlements in your app bundle signature do not match the ones that are contained in the provisioning profile. The bundle contains a key that is not included in the provisioning profile: 'com.apple.developer.team-identifier' in 'xxxxxx/Payload/xxxxxxxx.app/Contents/MacOS/Xxxxxxx'.If I resign App with next scriptsign.sh#!/bin/bash APP=XXXXXXXXX APP_PATH=install/mas/Xxxxxxxxx.app RESULT_PATH=AppStore/$APP.pkg APP_KEY=3rd Party Mac Developer Application: XXXXXXXXXX (XXXXXXXXXXXXX) INSTALLER_KEY=3rd Party Mac Developer Installer: XXXXXXXXX (XXXXXXXXXXX) CHILD_PLIST=plists/child.plist PARENT_PLIST=plists/parent.plist LOGINHELPER_PLIST=plists/loginhelper.plist FRAMEWORKS_PATH=$APP_PATH/Contents/Frameworks codesign
Replies
0
Boosts
0
Views
1.4k
Activity
Feb ’18
Reply to 3 Code Signing Errors
This is to chuckc192000 or anyone else who reads this post.Now I am getting a different message when I try to run my app on my iPad air.It's :Command /usr/bin/codesign failed with exit code 1Any suggestions?JR
Replies
Boosts
Views
Activity
Feb ’18
Reply to copy on code sign, where does version come from?
I'm hitting the same problem as StarGazerI. I have a private framework that just has a single version of 1. Xcode throws an error while trying to sign Versions/A, which does not exist. This happens when Code Sign On Copy is checked in a Copy Files Build Phase.If I copy the failing codesign command and run it in Terminal on the same framework, it works if I use:/usr/bin/codesign --force --sign mykey --preserve-metadata=identifier,entitlements,flags --timestamp=none /Users/karl/Library/Developer/Xcode/DerivedData/CreateInstance-fzlvjftxqybywnftwjerjoginndb/Build/Products/Debug/foo.framework/Versions/1or/usr/bin/codesign --force --sign mykey --preserve-metadata=identifier,entitlements,flags --timestamp=none /Users/karl/Library/Developer/Xcode/DerivedData/CreateInstance-fzlvjftxqybywnftwjerjoginndb/Build/Products/Debug/foo.frameworkIt seems that Xcode is intent on expecting a Version/A in the framework, which is not strictly required according to the various Frameworks and codesign
Topic: Code Signing SubTopic: General Tags:
Replies
Boosts
Views
Activity
Feb ’18
Developing MacOS Apps with Adobe Air + codesign = resource fork, Finder information, or similar detritus not allowed
Hi,I'm developing macOS Apps using Adobe Air. This used t owork quite well! Now I've finished a new macOS App and I'm trying to use my old script (which always worked before) but it seems Apple changed something.When I use this script in Terminal:cd /Users/essig/Desktopcp MacProcess/Info.plist Europa meistern.app/Contents/Info.plistcp MacProcess/Icon.icns Europa meistern.app/Contents/Resources/Icon.icnschmod -R 777 Europa meistern.appcodesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIR_64 Helpercodesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIR_64codesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/Frameworks/Adobe AIR.framework/Versions/Current/Adobe AIRcodesign -f -v -s 3rd Party Mac Developer Application: Jan Essig Europa meistern.app/Contents/MacOS/Europa meisternc
Replies
1
Boosts
0
Views
1.3k
Activity
Feb ’18
Reply to Developing MacOS Apps with Adobe Air + codesign = resource fork, Finder information, or similar detritus not allowed
Good morning,I received some great hints from a friend and I guess I´m close do fix this issue.After publishing the macOS App from Animate CC / Adobe Air (27.0.0.116) I opened the .app (Control Click on the .app file and select 'Show Package Contents‘).- In the Contents/Resources folder I replaced the Icon.icns file with my own.- Additions to the Info.plist <key>LSApplicationCategoryType</key> <string>public.app-category.education</string> <key>CFBundleVersion</key> <string>1.0.0</string>Then I deleted these Files from the Package:- webkit .dylib file at Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/WebKit.dylib- Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Adobe AIR.vch - Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/Flash Player.plugin- Contents/Frameworks/Adobe AIR.framework/Versions/1.0/Resources/_MACOSX (the entire folder)Then I used this code in Terminal for signing the App: cd /Users/essig/Desktopchmod -
Replies
Boosts
Views
Activity
Feb ’18
Xcode New Build System codesign error
I switched a project to the New Build System to see what it was like. The result was not good. My app is created, but fails upon launch due to a codesign error. What is strange is that codesign says all is OK. Also, switching back to the default build system resolves the issue.$ codesign -dv old-build-system/GeoTag.app (copied the build folder to the desktop to compare with the new build system code) Executable=/Users/marc/Desktop/Build/Products/Debug/GeoTag.app/Contents/MacOS/GeoTag Identifier=org.snafu.GeoTag Format=app bundle with Mach-O thin (x86_64) CodeDirectory v=20200 size=4752 flags=0x0(none) hashes=141+5 location=embedded Signature size=4685 Signed Time=Feb 23, 2018 at 4:48:01 PM Info.plist entries=28 TeamIdentifier=A3UXBEBE8Z Sealed Resources version=2 rules=13 files=242 Internal requirements count=1 size=176$ codesign -dv new-build-system/GeoTag.app Executable=/Users/marc/Library/Developer/Xcode/DerivedData/GeoTag-aqjdodmrxrygnggelbxhetiiwrcm/Build/Products/Debu
Replies
4
Boosts
0
Views
1.4k
Activity
Feb ’18
unable to build chain to self-signed root for signer
Hello - I have a membership as an Apple Developer - I have been deploying and testing apps for some time and suddenly I am getting a code signing error. I am not sure what has changed? I have tried numerous solution/suggestion on the forum with no luck. -I have deleted the KeyChain access certificates and re-created via xcode. I have looked at the immediate and root certificates but not sure which ones I need - tried a number of them. I did register an app in the iTunesConnect to begin the process of submiting for approval - but that shouldn't impact my development workflow when deploying to phone? Any guidance is much appreciated.Warning: unable to build chain to self-signed root for signer iPhone Developer: Name (xxxxxxxxxxxxx)/Users/Name/Library/Developer/Xcode/DerivedData/Unity-iPhone-ctglawntjuiiaacqkcyropceltlb/Build/Products/ReleaseForRunning-iphoneos/AppTestName.app: unknown error -1=ffffffffffffffffCommand /usr/bin/codesign failed with exit code 1Thank you!
Replies
1
Boosts
0
Views
1.8k
Activity
Mar ’18
Reply to unable to build chain to self-signed root for signer
>Command /usr/bin/codesign failed with exit code 1Ah...the gold standerd for generic errors.Have you baselined?Create a new app, your choice of iOS simple project, no changes, then attempt to build to your device. What happens? >ReleaseForRunning-iphoneos/What does that mean? Is that your doing?
Replies
Boosts
Views
Activity
Mar ’18
Reply to Why is my MacBook Pro's Touchbar blocking port 3000?
/usr/local/touch/MultiTouchPlatformHelper isn’t an Apple thing; on a fresh install of macOS 10.13, /usr/local/ is empty: $ ls -lh /usr/local/ $You’ll need to track down how that software got installed and talk with its author. You might be able to make some headway by dumping the code signature of the program. For example, on my day-to-day work machine I have the BBEdit tools installed, and I see this:$ codesign -d -vv /usr/local/bin/bbedit Executable=/MyApplications/BBEdit.app/Contents/Helpers/bbedit_tool Identifier=com.barebones.bbedit-tool Format=Mach-O thin (x86_64) CodeDirectory v=20200 size=473 flags=0x0(none) hashes=10+2 location=embedded Signature size=4630 Authority=Developer ID Application: Bare Bones Software, Inc. (W52GZAXT98) Authority=Developer ID Certification Authority Authority=Apple Root CA Signed Time=13 Feb 2018 at 18:07:30 Info.plist entries=17 TeamIdentifier=W52GZAXT98 Sealed Resources=none Internal requirements count=1 size=220Share and Enjoy — Quinn “The Eskimo!” Apple Develop
Replies
Boosts
Views
Activity
Mar ’18
Keychain access prompt on app upgrade
I have an app that adds some items to the keychain. I've noticed recently that when upgrading the app, the system pops up the allow access to this keychain item dialog when it attempts to read a keychain item that was added by the previous version. This app is codesigned and passes all codesign diagnostics. Did something change recently that causes this permission request to pop up even though the both versions of the app are signed with the exact same certificate.I will state that the app is not signed with a Developer ID Application certificate but with a valid code signing certificate from a non-Apple CA. Is there some new requirement that a Developer ID Application certificate must be used in order to not see this prompt when an app is upgraded?I dumped the keychain using security dump-keychain -a before and after upgrade and the only difference between the item is that the partition_id entry contains an additional cdhash for the new app. From what I understand cdhash will change when th
Replies
5
Boosts
0
Views
887
Activity
Mar ’18