Notarized package fails to run

Question

Created Jun ’21

Replies 2

Boosts 0

Participants 3

I'm building a Unity application and attempting sign, package, and notarize the app for distribution outside of the App Store.

I've joined the Developer Program, and created both Application and Installer Developer Certificates and installed them to Keychain.

Using a command line build pipeline, I am able to use productbuild, productsign, and xcrun altool to generate my pkg and notarize it.

Notarization is successful, and I receive Status: success and Status Message: Package Approved. Then I staple the notarization ticket to my package.

However, when running the installer, I'm met with an error saying "MyPackage.pkg can't be installed because its digital signature is not trusted."

If I generate the same installer without notarizing it, I have no problem running it and it installs successfully if I alter my security settings to allow apps from unknown developers.

Does anyone here have experience packaging Unity apps for Mac? What am I missing here...? All the feedback I'm getting from the notarization process appears to be positive, no errors to indicate that something went wrong until I actually try to test installation.

Boost

Answer 1

Systems Engineer OP

Apple

Jun ’21

I've joined the Developer Program, and created both Application and Installer Developer Certificates and installed them to Keychain.

I am assuming that these are Developer ID certificates, but I just wanted to confirm.

Regarding:

However, when running the installer, I'm met with an error saying "MyPackage.pkg can't be installed because its digital signature is not trusted."

If you run the following command on your pkg, do you see a valid Developer ID chain of trust?

% pkgutil --check-signature my_new_notarized_package.pkg

This would include something that starts with your Developer ID signing certificate and goes through Developer ID Certification Authority and then ends up at Apple Root CA.

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com

0

Answer 2

DTS Engineer OP

Apple

Jun ’21

However, now the app itself fails to run, it just gets stuck on launch.

The first step in debugging weird problems like this is to reproduce the problem in isolation. For my advice on that front, see Testing a Notarised Product.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0