Notarized app but quarantine

Question

Created Jan ’19

Replies 6

Boosts 0

Views 2.4k

Participants 4

Hi,

I try to notarized my application, from Xcode I do an archive, choose "Distribute app", upload it to be notarized and get a successful message.

When I export the notarized application I also attach the ticket to validate it using:

xcrun stapler staple -v "myApp.app"

Everything seems to works perfectly since when I run the following command:

spctl -a -v myApp.app

I have this output

myApp.app: accepted
source=Notarized Developer ID

However, when I put it on a server and I tried to download, I cannot launch it but I get the Gatekeeper pop telling me that

"myApp" can’t be opened because the identity of the developer cannot be confirmed.

What's wrong? I don't understand since the application is notarized...

Any idea?

Thanks

Boost

Answer 1

DTS Engineer OP

Apple

Jan ’19

What does

spctl

think about the downloaded version of your app?

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

0

Answer 2

DEADBEEF OP

Jan ’19

Thank you for helping me.

I tried on different macOS version.

When I download it on macOS 10.14 Mojave and run

spctl -a -v myApp.app

I have:

myApp.app: accepted
source=Notarized Developer ID

And manage to launch it.

However on macOS 10.12 doing the same give me the following message

myApp.app: accepted
source=Developer ID

(From what I understood, the source=Developer ID is normal in macOS 10.13 and earlier) but when I launch the app I have the following message in gatekeeper popup:

“myApp” can’t be opened because the identity of the developer cannot be confirmed. Your security preferences allow installation of only apps from the App Store and identified developers.

1

Answer 3

DTS Engineer OP

Apple

Jan ’19

Notarisation is new in 10.14, so 10.12 is definitely not going to say

Notarized Developer ID

. However, I would expect that it still accept it as a standard Developer ID, which is what

spctl

is telling you here.

As to why your getting an error on launch on 10.12, that’s less clear. If you sign your app without notarisation — that is, as an old school Developer ID app — what happens on 10.12? [1]

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

[1] I’m not suggesting that you ship this way; this is just a diagnostic test.

0

Answer 4

cenkingunlugu OP

Jul ’19

Could you find a solution? I am also having exact same problem.

0

Answer 5

chellaprabu210994 OP

Aug ’19

Ive Codesigned and notarised the application but still the app is quarantined.

0

Answer 6

DTS Engineer OP

Apple

Aug ’19

Problems like this have a variety of different causes, and thus DEADBEEF’s experience is unlikely to be directly relevant to yours. My recommendation is that you open a new thread here Core OS > Security and we can look at your issue in detail there.

Share and Enjoy
—
Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

0