Search results for

“codesign”

3,223 results found

Post

Replies

Boosts

Views

Activity

Reply to Not able to install enterprise build in iOS 15 beta version
This worked for my enterprise app: 0) downloaded latest xCode Created new provisioning profile, last one was 11/2020, so it was due anyway, reused the same certificate, just to make it easy. Re-signed the app using the new provisioning profile and Matt’s information, codesign -s “certificate in keychain” etc, including the generate-entitlement-der flag codesign-dvvvvv still shows version 20400, but the -7 and -6 are there now. re-package and redeploy app.
Sep ’21
Reply to add /usr/bin/codesign to acl for private key
[quote='781889021, perdrix52, /thread/781889, /profile/perdrix52'] I want to add /usr/bin/codesign to the list but the gui window that pops up when I click on + doesn't seem to allow me to do that [/quote] That works for me (testing on macOS 15.4). Within the file sheet, press command-shift-G and enter /usr into the path. You can then navigate to /usr/bin and select codesign. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: Code Signing SubTopic: General
Apr ’25
Reply to PKG Generate
Hi, I still have the same error. Here is my procedure in detail Script editor: main.scpt save as application. I sign my code: codesign -s Developer ID Application -f --timestamp -o runtime /contents/Resources/Scripts/Main.scpt Error: Main.scpt: resource fork, Finder information, or similar detritus not allowed -xattr -cr Main.scpt I resign my code: codesign -s Developer ID Application -f --timestamp -o runtime /contents/Resources/Scripts/Main.scpt=OK CodeSign Main.scpt -vvvvvv = Main.scpt: valid on disk, Main.scpt: satisfies its Designated Requirement. Then I create the package with the tool : the macOS installer builder: https://medium.com/swlh/the-easiest-way-to-build-macos-installer-for-your-application-34a11dd08744 When the package is built, to execute it, I have to right click on it and open. The error message is displayed but I can execute package. I'd like no to display the error message :)
May ’23
codesign fails due to timestamp issue - server probably down
I'm signing using Developer ID Application and it suddenly started failing due to the following reason A timestamp was expected but was not found.. from the logs it looks like a failure to connect Apple's dedicated server. Perhaps there's a way to verify this theory, or get another timestamp server to be set in --timestamp option? thanks 2023-04-24 15:53:38.977560+0300 0x2e29ef5 Error 0x0 696 0 XPCTimeStampingService: (CFNetwork) NSURLConnection finished with error - code -1001 2023-04-24 15:53:38.977753+0300 0x2e29ef5 Default 0x0 696 0 XPCTimeStampingService: (CFNetwork) [com.apple.CFNetwork:Summary] Task <42F5893A-941A-4293-BB14-F75C42363836>.<0> summary for task failure {transaction_duration_ms=15792, response_status=-1, connection=817, reused=1, request_start_ms=0, request_duration_ms=0, response_start_ms=0, response_duration_ms=0, request_bytes=0, response_bytes=0, cache_hit=false}
1
0
1.3k
Apr ’23
Multiple prompts codesign wants to access key during build script
We use a Mac as a Jenkins agent to build the installer for our Mac application. The script compiles things, signs, builds a dmg, has it notarized, etc... This all works - EXCEPT that I have to manually respond to 8 or so prompts for an Admin ID and password so the script can access the keys. This is NOT usable for an automated build. I've done searches and found several possible solutions - all of which either reference Dialogs that don't seem to exist, or just don't work. One of the complications here is that the Jenkins user is NOT an administrator. The Mac mini is currently running Mac OS 13.2.1. Anyone know how to pre-authorize the key access so this process can run unattended?
0
0
418
Apr ’23
Reply to app is already signed / code object is not signed at all
I’ve seen problems like this before. In one case it was because the developer was passing multiple subcommands to the codesign command. That is, they were passing in --sign (aka -s) and --verify (aka -v) to the same codesign invocation, and that caused weird issues. And the solution was to stop doing that (-: However, the most common cause is that the app doesn’t follow the rules in Placing content in a bundle or you’re not following the steps to sign nested code in Creating distribution-signed code for macOS. Consider this example: % mkdir -p MyTrue.app/Contents/MacOS % cp /usr/bin/true MyTrue.app/Contents/MacOS/MyTrue % cp /usr/bin/false MyTrue.app/Contents/MacOS/MyFalse % codesign --remove-signature MyTrue.app/Contents/MacOS/MyFalse % codesign --remove-signature MyTrue.app/Contents/MacOS/MyTrue % codesign -s - MyTrue.app MyTrue.app: code object is not signed at all In subcomponent: /Users/quinn/Test/MyTrue.app/Contents/MacOS/MyFalse This bundle structure is corr
Topic: Code Signing SubTopic: General Tags:
Aug ’25
Reply to Codesign really slow since updating to sierra 10.12.1
I also had this same problem. In my KeyChain I had 1700+ in the 'My Certificates' section, I delete all but the current Apple certs that I needed and it took my codesigning time down from 4mins to 3secs!
Replies
Boosts
Views
Activity
Oct ’16
Reply to When creating a permanent key with SecAccessControlCreateWithFlags, which keychain is it saved in?
Answered #2 myself -- No because there is an ID appended which seems to be based on your cert/codesigning. Reference information here and here Still wondering about #1 though
Topic: Programming Languages SubTopic: Swift Tags:
Replies
Boosts
Views
Activity
Nov ’22
Reply to Not able to install enterprise build in iOS 15 beta version
This worked for my enterprise app: 0) downloaded latest xCode Created new provisioning profile, last one was 11/2020, so it was due anyway, reused the same certificate, just to make it easy. Re-signed the app using the new provisioning profile and Matt’s information, codesign -s “certificate in keychain” etc, including the generate-entitlement-der flag codesign-dvvvvv still shows version 20400, but the -7 and -6 are there now. re-package and redeploy app.
Replies
Boosts
Views
Activity
Sep ’21
Reply to add /usr/bin/codesign to acl for private key
[quote='781889021, perdrix52, /thread/781889, /profile/perdrix52'] I want to add /usr/bin/codesign to the list but the gui window that pops up when I click on + doesn't seem to allow me to do that [/quote] That works for me (testing on macOS 15.4). Within the file sheet, press command-shift-G and enter /usr into the path. You can then navigate to /usr/bin and select codesign. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = eskimo + 1 + @ + apple.com
Topic: Code Signing SubTopic: General
Replies
Boosts
Views
Activity
Apr ’25
Reply to PKG Generate
Hi, I still have the same error. Here is my procedure in detail Script editor: main.scpt save as application. I sign my code: codesign -s Developer ID Application -f --timestamp -o runtime /contents/Resources/Scripts/Main.scpt Error: Main.scpt: resource fork, Finder information, or similar detritus not allowed -xattr -cr Main.scpt I resign my code: codesign -s Developer ID Application -f --timestamp -o runtime /contents/Resources/Scripts/Main.scpt=OK CodeSign Main.scpt -vvvvvv = Main.scpt: valid on disk, Main.scpt: satisfies its Designated Requirement. Then I create the package with the tool : the macOS installer builder: https://medium.com/swlh/the-easiest-way-to-build-macos-installer-for-your-application-34a11dd08744 When the package is built, to execute it, I have to right click on it and open. The error message is displayed but I can execute package. I'd like no to display the error message :)
Replies
Boosts
Views
Activity
May ’23
Reply to libswiftCore.dylib: code object is not signed at all
Are you using the Xcode provided switft toolchain or one from swift.org? It looks like the swift runtime in the toolchain is not codesigned. I remember this was an issue with some of the downloadable toolchains a few weeks ago.
Replies
Boosts
Views
Activity
Sep ’16
Reply to Re-sign an IPA using XCode
Umm.. Yes.You set code sign identities inside Xcode using the Code Signing Identity properties on your targets.You can code sign on the command line using codesign.
Replies
Boosts
Views
Activity
Dec ’15
Reply to Big Sur Problem?: "You do not have permission to open the application"
@SridharRaj Could you help me? Where should I type this command? in the Terminal? Or is this a step giude? - codesign --force --deep --sign - /Applications/SpringToolSuite4.app I really appreciate if you could help me, I am totally rookie. Thank you!
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Oct ’22
Command CodeSign failed with a nonzero exit code - HealthKit Signing
I am trying to build an app with Healthkit App and it runs into the code signing issue. Error Message - https://developer.apple.com/forums/content/attachment/8b6de92d-e092-416b-8268-7d273ffbdd89 Any inputs would be great!
Replies
1
Boosts
0
Views
1.3k
Activity
Sep ’20
codesign fails due to timestamp issue - server probably down
I'm signing using Developer ID Application and it suddenly started failing due to the following reason A timestamp was expected but was not found.. from the logs it looks like a failure to connect Apple's dedicated server. Perhaps there's a way to verify this theory, or get another timestamp server to be set in --timestamp option? thanks 2023-04-24 15:53:38.977560+0300 0x2e29ef5 Error 0x0 696 0 XPCTimeStampingService: (CFNetwork) NSURLConnection finished with error - code -1001 2023-04-24 15:53:38.977753+0300 0x2e29ef5 Default 0x0 696 0 XPCTimeStampingService: (CFNetwork) [com.apple.CFNetwork:Summary] Task <42F5893A-941A-4293-BB14-F75C42363836>.<0> summary for task failure {transaction_duration_ms=15792, response_status=-1, connection=817, reused=1, request_start_ms=0, request_duration_ms=0, response_start_ms=0, response_duration_ms=0, request_bytes=0, response_bytes=0, cache_hit=false}
Replies
1
Boosts
0
Views
1.3k
Activity
Apr ’23
Multiple prompts codesign wants to access key during build script
We use a Mac as a Jenkins agent to build the installer for our Mac application. The script compiles things, signs, builds a dmg, has it notarized, etc... This all works - EXCEPT that I have to manually respond to 8 or so prompts for an Admin ID and password so the script can access the keys. This is NOT usable for an automated build. I've done searches and found several possible solutions - all of which either reference Dialogs that don't seem to exist, or just don't work. One of the complications here is that the Jenkins user is NOT an administrator. The Mac mini is currently running Mac OS 13.2.1. Anyone know how to pre-authorize the key access so this process can run unattended?
Replies
0
Boosts
0
Views
418
Activity
Apr ’23
Reply to How to count the number of signed files
Yes I'm referring to the files inside the .app. We need this info for statistics and create if possible also the reports. We execute the codesign inside a CI pipeline. Thanks
Topic: Code Signing SubTopic: General
Replies
Boosts
Views
Activity
Jan ’25
Reply to app is already signed / code object is not signed at all
I’ve seen problems like this before. In one case it was because the developer was passing multiple subcommands to the codesign command. That is, they were passing in --sign (aka -s) and --verify (aka -v) to the same codesign invocation, and that caused weird issues. And the solution was to stop doing that (-: However, the most common cause is that the app doesn’t follow the rules in Placing content in a bundle or you’re not following the steps to sign nested code in Creating distribution-signed code for macOS. Consider this example: % mkdir -p MyTrue.app/Contents/MacOS % cp /usr/bin/true MyTrue.app/Contents/MacOS/MyTrue % cp /usr/bin/false MyTrue.app/Contents/MacOS/MyFalse % codesign --remove-signature MyTrue.app/Contents/MacOS/MyFalse % codesign --remove-signature MyTrue.app/Contents/MacOS/MyTrue % codesign -s - MyTrue.app MyTrue.app: code object is not signed at all In subcomponent: /Users/quinn/Test/MyTrue.app/Contents/MacOS/MyFalse This bundle structure is corr
Topic: Code Signing SubTopic: General Tags:
Replies
Boosts
Views
Activity
Aug ’25
Reply to KeyChainStore returns 34018 error
so I run the command.$ codesign -d --entitlements :- /path/to/your.appand what? What is that useful for? how do I know I have the right entitlements, the my entitlements need special configuration so that KeyChain works? I dont understand.
Topic: Privacy & Security SubTopic: General Tags:
Replies
Boosts
Views
Activity
Dec ’15
Reply to Issue: ARKit Camera Frame Provider Not Authorized in visionOS App
I checked entitlements with the codesign command and it looks like my app is correctly entitled: application-identifierZ9FYRK8P89.com.imeve.avpenterprisetestcom.apple.developer.arkit.main-camera-access.allowcom.apple.developer.screen-capture.include-passthroughcom.apple.developer.team-identifierZ9FYRK8P89get-task-allow
Topic: Spatial Computing SubTopic: ARKit Tags:
Replies
Boosts
Views
Activity
Dec ’24