codesign

Can Xcode codesign a command line utility/application?I have a small UNIX application I want to distribute, and it seems the polite thing to do is sign it. I'm not sure the correct way to do this.Thanks,Todd

Hi , I've couple of questions relate to timestamp server used for codesign and productsign commands. Can I use any timestamp server with codesign command? If yes, can you please share list of trusted TSAs? Also, will notarization succeed if I use non-apple timestamp server? codesign -fs ${identity} TestApp.app --timestamp=${timestampServer} How do I specify a timestamp server in productsign command?

I have been using the following commands for codesign, for two apps in my script: sudo codesign -f --deep --options=runtime --strict -s $CODE_SIGN_CERTIFICATE $BUNDLE_DIR/APP1.app --timestamp --verbose sudo codesign --timestamp -f --deep --options=runtime --strict -s $CODE_SIGN_CERTIFICATE $OUTPUT_DIR/APP2.app --verbose APP1 gets signed, and staple and validate action for it says successful. However, APP2 fails every time with the error: A timestamp was expected but was not found This was working fine until a few days ago but it fails every time since yesterday morning. I looked around and tried following things but nothing worked: timestamp=none or removing timestamp flag altogether timestamp=http://timestamp.apple.com/ts01 [and several other free timestamp urls] removing strict flag. I'm working on Ventura, and the apps were created with QT 5.9.0. Xcode version = 14.1. Requesting any kind of help at the earliest. Thanks in advance

Hello, I'm a beginner at creating apps with Python. I'm trying to package a script into a .dmg file using Py2App. When I run python3 setup.py py2app -A I get an app in the dist folder. When I unpack the app file, I can launch the app it via the terminal. However running the line above also gives me the following errors: .DS_Store files cannot be a symlink RuntimeError: Cannot sign bundle If I just run python3 setup.py py2app, the terminal will say that the bundle was created successfully. But when I launch the app, I get the following Termination Reason: Namespace CODESIGNING, Code 2 Codesigning is a concept I'm not familiar with. I googled online and even tried the following to codesign my app with no success codesign --force --deep --sign - main.app main.app: main executable failed strict validation (resulting error) I'd appreciate any input I could get. Really not sure how to proceed from here.

Hey, I'm trying to code sign my Mac OS X app. I generate entitlements file, but during execution of the command: codesign -f -s DeveloperName -o runtime --timestamp ./App.app --entitlements app.entitlements it gives me the next error: Failed to parse entitlements: AMFIUnserializeXML: syntax error near line 12 In the file I have a date value field on the line 12: ExpirationDate 2038-01-31T11:46:58Z If I move the date on the other line, codesign shows the error line number according to the new line number. If I removed I used plutil commands from the Apple article - https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/resolving_common_notarization_issues?language=objc, and the utility show that everything is ok, but it make no sense for codesign. Mac OS X version: 10.15.7 How can fix it and sign the app with entitlements file?

I have a project that includes an Endpoint security system extension as a launch daemon and a network extension in another linked app. Previously I have built the project in release mode via xcodebuild. This worked fine during testing where my provisioning profile was a testing one not provisioned for all devices.Now I have switched the provisioning profile for a distribution ID profile that is provisioned on all devices. Building through xcode itself successfully builds in debug and release. However building through `xcodebuild` fails at the `codesign` task.what could be going on ? note my dev machine is offline.Best Regards

I have a series of codesign commands that I would run regularly to sign my app. They always worked fine, until I recently upgraded my Mac OS to Monterey and XCode to 13.3.1. Now the same syntax just results in codesign's usage message. Here's one of the commands that fails: codesign --deep --force --verify --verbose --timestamp --options runtime --entitlements example.entitlements --sign Developer ID Application: Company Name (XXXXXXXXXX) I tried variations also, to no avail, such as this: codesign -s Developer ID Application: Company Name (XXXXXXXXXX) --options runtime --timestamp --force --deep --entitlements example.entitlements Any idea what I'm doing wrong, and why it stopped working after upgrading? Thanks.

I have a nodejs app, made into a single executable using pkg which signs the app with an ad-hoc signature. This single executable (xkeys-server-arm64)works fine on the machine which made it but fails on another machine of the same type - presumably because the ad-hoc signature is insufficient in this case. I've tried to replace the ad-hoc signature with my own, using: codesign --force --verify --verbose --sign Developer ID Application: Christoph Willing (..........) xkeys-server-arm64 but that fails with xkeys-server-arm64: replacing existing signature xkeys-server-arm64: errSecInternalComponent Checking my own signature with: find-identity -v -p appleID shows a bunch of stuff which doesn't look good. My Christoph_Willing_dev_CA entry says (CSSMERR_TP_NOT_TRUSTED) All other entries, including the Developer ID Application entry I'm trying to codesign with have the comment: (Missing required extension) My questions are: what causes the errSecInternalComponent error (and how can I fix it)? why

I tried to codesign my app by following way, we downloaded the certificate from apple developer account and We tried to sign the binaries with the downloaded certificate using codesign command . line command (sudo codesign -f -vv -o runtime --deep --timestamp -s Developer Id Cer: user(123455) try.dylib) I have received the following error Though I have added the certificate in keychain access and also checked that the certificate is valid, I still got**”The specified item could not be found in the keychain”** . Then I tried same scenario with other certificate but got following error Warning: unable to build chain tp self-signed root for signer Developer Id Cer: user(123456)” try.dylib: errSecInternalComponent Any help would be really appreciated

I am Archiving my app in Xcode 13.4.1 and signing it for AdHoc distribution using Automatic signing. I then distribute output to directory on my M1 Mac mini running Monterey 12.5. I install this version of the app on iPhone 16 and it works. I have a script that uses PListBuddy to change the name of the App and put in a URL for in a user defined field in the Plist for the app to use to retrieve information used in the app. The script is below at bottom. In the script I then remove the .app/_CodeSignature and copy the mobile provision to the .app/embedded.mobileprovison. In the script I then use codesign to resign the .app and move it to a directory passed into the script. I install using DistributionSummary.plist listed below at bottom. This worked before an unfortunate incident forced me to change the login to the Mac mini which is also the admin user. I had to use the terminal process of “replacepassword” (?) which was done by Apple rep at the physical App Store in my town. This allowed me back into

I'm following the advice from this earlier discussion - https://developer.apple.com/forums/thread/129544?login=true. I put my helper executables in /Contents/Helpers. I added a Run Script build phase to sign the binaries in the helper directory. It contains these lines: codesign --verbose --timestamp --options=runtime -s ${CODE_SIGN_IDENTITY} -v ${HELPER_DIR}/rustybates codesign --verbose --timestamp --options=runtime -s ${CODE_SIGN_IDENTITY} -v ${HELPER_DIR}/${IMAGE_MAGICK}/bin/magick This script completes successfully, but the final codesign step for the application does not. It fails with: CodeSign /Users/jeff/Library/Developer/Xcode/DerivedData/Easy_Bates-hbfethteogzgwmghlgwdflcwddow/Build/Products/Development/Easy Bates.app (in target 'Easy Bates' from project 'Easy Bates') ttcd /Users/jeff/gitrepos/code/code/macbates ttexport CODESIGN_ALLOCATE=/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/codesign_allocate Signing Identity:tt -

Attempting to use codesign yesterday or today is giving A server with the specified hostname could not be found. codesign --timestamp=none works, but the result can't be notarized. The Apple system status page is showing a problem with Xcode Cloud. Could this be related? Does anybody know the name or address that codesign is attempting to access? Is there any workaround, e.g. use of a different timestamp service? Thanks in advance for any suggestions.

Been using Xcode for a while with C++ set to sign locally (and objC before that). All worked ok. Looking to learn swift. Created a new, blank MacOS project, which starts compiling the template project (no code added yet by me) and fails with error Command CodeSign failed with a nonzero exit code. It's set to automatically manage signing. I have valid development certificates. I've read lots of forum articles etc but unable to resolve. Error description resource fork, Finder information, or similar detritus not allowed but it's exclusively apple code at this stage so would not expect any non-compliant files to be involved. Any suggestions as currently I've fallen at the first hurdle on my Swift journey? Full codesign command line below: Signing Identity: Apple Development: Steve Proctor (XXXXXXX) /usr/bin/codesign --force --sign xxxxxx -o runtime --entitlements /Users/steve/Documents/dev/t1/Build/Intermediates.noindex/Previews/macos/t1/Intermediates.noindex/t1.build/Debug/t1.build/t1

Hello! Starting yesterday we've been having a problem getting our app notarized. The codesign command fails with this error A timestamp was expected but was not found. Since the issue started, we have been able to get the app notarized successfully twice, but every other attempt has resulted in the same failure. Are there issues currently with timestamp.apple.com? When I curl that URL I receive a 302 response. Is this to be expected? Thanks!

Showing Recent Errors Only Build target KidsEducationalGame-mobile of project KidsEducationalGame with configuration Debug warning: Provisioning profile iOS Team Provisioning Profile: com.olimpia.hector for KidsEducationalGame-mobile contains entitlements that aren't in the entitlements file: com.apple.developer.kernel.extended-virtual-addressing, com.apple.developer.associated-domains.mdm-managed, com.apple.developer.coremedia.hls.low-latency, and com.apple.developer.devicecheck.appattest-environment. To use these entitlements, add them to your entitlements file. Otherwise, remove unused entitlements from your provisioning profile. (in target 'KidsEducationalGame-mobile' from project 'KidsEducationalGame') warning: Traditional headermap style is no longer supported; please migrate to using separate headermaps and set 'ALWAYSSEARCHUSERPATHS' to NO. (in target 'KidsEducationalGame-mobile' from project 'KidsEducationalGame') CodeSign /Users/Hector/Library/Developer/Xcode/DerivedData/KidsEducationalGame