I'm trying to sign (using codesign) an app (http://dl.nwjs.io/v0.12.3/nwjs-macappstore-v0.12.3-osx-x64.zip) for the Mac App Store that hasn't been singed yet. The main app (nwjs.app) isn't signed but the Helpers seem to get signed at some point on my system with Signature=adhoc before I'm able to sign them myself. Because of this I have to use the --force flag with the codesign command. I've read that if Parental Controls are enabled or certain options are enabled in the filewall, that the OS could add the adhoc signature. However, I'm admin so Parental Controls are not enabled and I've disable the firewall entirelly, but the adhoc sig is still being added to the Helpers; and again, only to the Helpers and not the main app (nwjs.app) itself. Does anyone have an idea why this is happeing? Or can someone point me to a doc that has a complete list of the facilites that will try to sign an app that is not already signed?Thanks.
Search results for
codesign
3,110 results found
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
I eventually gave up as it seems it was unhappy about this:illed com.mycomp.app [pid 28331] because its use of the com.apple.developer.icloud-container-environment entitlement is not allowedBut why not? I'm using my Development profile (i.e. Adhoc beta testing as per your documentation as well) and I saw that Xcode added a this entitlement with the value 'Development', which should be allowed outside the store as long as I'm signing with my Development ID (note: not 'Developer ID', but instead my Mac Developer profile).This is quite frustrating. Our app uses CloudKit and I need to be able to beta test it. We can't seem to! Finally if I export as 'as a Mac Applicaiton', this works but then spctl says:MyApp.app: rejectedorigin=Mac Developer: SomeDeveloper (SomeID)Aaargh. When I hand this over to our beta testers, they say the app won't install until they switch off gatekeeper.Why Apple, why! Do you no longer test these frameworks with all the neat testing suites added to xcode? Completely baffling that while iO
Topic:
Code Signing
SubTopic:
General
Tags:
Mac developers get no traditional 'Adhoc' provisioning profiles.Mac developers get no TestFlight support.Mac developers get heaps of codesigning and gate keeper issues when trying to legitimately build and test with a 'Development (i.e. with registered mac devices) signed profile, especially if it uses iCloud, CloudKit, MapKit.Why? Why is nothing being done about this? Where do we turn to? We submit bugs, which go unanswered. Man.. I've never spent more time fixing codesigning issues because of a GM build on the Mac than I have this time around. I seriously am going mad.
I should add, even setting it to 'Development' causes it to not launch with a codesign error saying this entitlement is not allowed. WHY NOT!
Topic:
Code Signing
SubTopic:
General
Tags:
OverviewOur command line builds (to build and create the .ipa) are no longer working.iTunesConnect has started rejecting builds that use the CODE_SIGN_RESOURCE_RULES_PATH build setting.If we build WITHOUT that setting the PackageApplication tool (which we use to create the signed .ipa) fails.It seems that PackageApplication calls /usr/bin/codesign with resource-rules arguments even if the CODE_SIGN_RESOURCE_RULES_PATH build setting is excludedI suspect the PackageApplication needs to be updated so that it does not call /usr/bin/codesign with resource-rules arguments when the CODE_SIGN_RESOURCE_RULES_PATH build setting is excluded.Has anyone found a solution for this?DetailsWe build our app on the command line like this:xcodebuild -workspace myApp.xcworkspace -scheme myApp -sdk iphoneos -configuration AppStoreDistribution OBJROOT=$PWD/build SYMROOT=$PWD/build ONLY_ACTIVE_ARCH=NO 'CODE_SIGN_RESOURCE_RULES_PATH=$(SDKROOT)/ResourceRules.plist'We create the signed .ipa on the command line like th
hmmm...I tried moving the other unused certificate to another keychain...so Xcode won't get confused. It seems I can only delete the item from my local keychain right after a system restart. Once Xcode starts doing its automatic stuff....it brute force re-downloads the unwanted certificate and installs it in my keychain..making the multiple codesigning problem reoccur.Not sure how this extra developer id certificates got created...
Topic:
Code Signing
SubTopic:
Certificates, Identifiers & Profiles
Tags:
Ended up removing my developer profile, going to my other mac and exporting it...then re-import it on the mac that was having the trouble...codesigning fine now. There still is the extra developer profile which can be confusing but i'll take what I can get.
Topic:
Code Signing
SubTopic:
Certificates, Identifiers & Profiles
Tags:
Hi,On existing project that always built without issue on 10.10/Xcode 6 I am now getting this error with 10.11/Xcode 7:Couldn't find platform family in Info.plist CFBundleSupportedPlatforms or Mach-O LC_VERSION_MIN for myBinaryI have 3 pre-complied binaries inside of my project. They do have their own entitlements files and they are codesigned but they do not have their own Info.plist. I tried adding CFBundleSupportedPlatforms to the main Info.plist with the value MacOSX but it's not resolving the issue. Any ideas?
Hi,Just updated to iOS 9.1 and XCode 7.1 and now none of my projects are deployable anymore.Seems like XCode keeps forgetting the password for my developer account. I add it and then I'mable to view details etc, but after a re-start its gone again.In addition I can't put anything on my device. No old projects and no new ones. Its as if XCode simplyhave no clue about what development profiles I have. I just keep getting codesign failed with exit code 1.Has det code signing been completely re-written ? Any new processes I need to do ?If I import my developer profile that I exported from XCode 7 nothing happens. It usually tells you whatnumber of development profiles and certificates that were imported, but I only get ... well... nothing.Any ideas on what to do here ?Niklas
On a machine with FileVault 2 enabled, my Apple Magic Mouse does not work until after I log in. After login, the mouse works and I can tell from IORegistryExplorer that `/System /Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/BroadcomBluetoothHostControllerUSBTransport.kext` is attached to `Bluetooth USB Host Controller@14830000`.Both the `IOBluetoothFamily.kext` and the enclosed `BroadcomBluetoothHostControllerUSBTransport.kext` have their Info.plist `OSBundleRequired` equal to Safe Boot, so the service should be available early.When I boot into single user mode and explicitly try to load the driver with % kextload BroadcomBluetoothHostControllerUSBTransport.kextThe system responds with Error in security framework, error -67674. /System/Library/Extensions/AppleKextExcludeList.kext has invalid signature; Trust cache is disabled. ERROR: invalid signature for '/System /Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/BroadcomBluetoothHostControllerUSBTransport.kext' will not load /System /
Dear developer,We have discovered one or more issues with your recent delivery for MyApp. To process your delivery, the following issues must be corrected:Invalid Signature - The binary with bundle identifier 'com.mycompany.myframework' at path myframework.framework] contains an invalid signature. Make sure you have signed your application with a distribution certificate, not an ad hoc certificate or a development certificate. Verify that the code signing settings in Xcode are correct at the target level (which override any values at the project level). If you are certain your code signing settings are correct, choose Clean All in Xcode, delete the build directory in the Finder, and rebuild your release target.Once these issues have been corrected, you can then redeliver the corrected binary.Regards,The App Store teamThis is also happening to me with my app. I don't have a watchKit extension, just a dynamic framework that i created. My BitCode is off for all my targets as well, and I've tried to revoke and ge
Topic:
Developer Tools & Services
SubTopic:
Xcode
Tags:
I'm also experiencing the same error from spctl (internal error in Code Signing subsystem) with the only results being the original source code with the error text and this post, though my environment differs.I'm running Yosemite 10.10.5 and though codesign runs just fine and reports good results with --display and --verify, inspecting it with spctl is a no go. Trying to run the app will result in the typical This app is damaged and can't be opened. You should move it to the Trash. error message. Restarting has no effect.Edit: Apologies, didn't see that this was specific to a 10.11 category.
Topic:
App & System Services
SubTopic:
Core OS
Tags:
HI Folks,I preparing a new release of an existing product. After I codesign the app bundle, codesign and spctcl give successful test results. However, if I download the app (in a DMG), copy it into the test system's /Applications folder, and trty to run it, Gatekeeper steps up and says that it's from an unrecognized developer.spctl --verbose --assess /Applications/BRU Server/BRU Server Console.app /Applications/BRU Server/BRU Server Console.app: acceptedcodesign -dvv /Applications/BRU Server/BRU Server Console.app Executable=/Applications/BRU Server/BRU Server Console.app/Contents/MacOS/BRU Server Console Identifier=com.tolisgroup.bruserver.console Format=bundle with Mach-O thin (i386) CodeDirectory v=20200 size=64616 flags=0x0(none) hashes=3223+3 location=embedded Signature size=4359 Authority=3rd Party Mac Developer Application: TOLIS Group, Inc. (9F5YWQBW9A) Authority=Apple Worldwide Developer Relations Certification Authority Authority=Apple Root CA Signed Time=Oct 2, 2015, 4:04:08 PM In
Just downloaded Xcode from https://developer.apple.com/xcode/download/ and I get this error. It won't start up.Deleted it and downloaded again to be sure. Got the same DMG file:MD5 (Xcode_7.1_beta_3.dmg) = 5498cdd8f4efb921295c6af4134d3b44I tried verifying on the command line.% spctl --assess --continue --verbose /Applications/Xcode-beta.app/Applications/Xcode-beta.app: a sealed resource is missing or invalidBut, on the other hand,% codesign -v --verbose /Applications/Xcode-beta.app/Applications/Xcode-beta.app: valid on disk/Applications/Xcode-beta.app: satisfies its Designated RequirementI just upgraded to MacOS 10.11 today, if that matters.
Quite often, it wouldn't give me a backtrace. I would get a message telling me that Xcode was corrupted and I should re-download. On doing this, I'd still get the same crash and same error.However - thinking it was somerthing to do with El Capitan and Xcode 7, I downgraded to Mavericks and Xcode 6.x.x only to get the same crash. But this time, I got a more meaningful trace and which pointed to the SDL2.framework being incorrectly signed. I fixed the codesign on the framework, ran Xcode again and everything worked (re-installed El Capitan and currently downloading Xcode 7 again).I'd suggest Xcode should give a meaningful error rather than just bailing if a framework has been incorrectly signed.
Topic:
Developer Tools & Services
SubTopic:
Xcode
Tags: