Hi,
The notarization worked on last month but now it fails with the below information.
--------------------------------------------------
createdDate: 2022-05-31T02:01:10.082Z
id: 780d608d-a183-4caf-aa71-ee93db254e1f
name: SonicWall Capture Client.4.0.1.Beta.pkg
status: Accepted
And the submit logs show below error.
I am not sure why it complains about "The binary is not signed".
{
"logFormatVersion": 1,
"jobId": "0b893061-763a-4098-8a0b-a3cb003fa756",
"status": "Invalid",
"statusSummary": "Archive contains critical validation errors",
"statusCode": 4000,
"archiveFilename": "SonicWall Capture Client.4.0.3.Beta.pkg",
"uploadDate": "2022-06-10T07:45:06.781Z",
"sha256": "e8423747eb762a89b134f5ac4dd9f14b1b88f354dde9d3c24959b5cd829458a6",
"ticketContents": null,
"issues": [
{
"severity": "error",
"code": null,
"path": "SonicWall Capture Client.4.0.3.Beta.pkg/SESFiles.pkg Contents/Payload/Library/SonicWall/CaptureClient/SonicWall Capture Client.app/Contents/MacOS/SonicWall Capture Client",
"message": "The binary is not signed.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "SonicWall Capture Client.4.0.3.Beta.pkg/SESFiles.pkg Contents/Payload/Library/SonicWall/CaptureClient/SonicWall Capture Client.app/Contents/MacOS/SonicWall Capture Client",
"message": "The signature does not include a secure timestamp.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "SonicWall Capture Client.4.0.3.Beta.pkg/SESFiles.pkg Contents/Payload/Library/SonicWall/CaptureClient/SonicWall Capture Client.app/Contents/MacOS/SonicWall Capture Client",
"message": "The executable does not have the hardened runtime enabled.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "SonicWall Capture Client.4.0.3.Beta.pkg/SESFiles.pkg Contents/Payload/Library/SonicWall/CaptureClient/SonicWall Capture Client.app/Contents/MacOS/SonicWall Capture Client",
"message": "The binary is not signed.",
"docUrl": null,
"architecture": "arm64"
},
{
"severity": "error",
"code": null,
"path": "SonicWall Capture Client.4.0.3.Beta.pkg/SESFiles.pkg Contents/Payload/Library/SonicWall/CaptureClient/SonicWall Capture Client.app/Contents/MacOS/SonicWall Capture Client",
"message": "The signature does not include a secure timestamp.",
"docUrl": null,
"architecture": "arm64"
},
{
"severity": "error",
"code": null,
"path": "SonicWall Capture Client.4.0.3.Beta.pkg/SESFiles.pkg Contents/Payload/Library/SonicWall/CaptureClient/SonicWall Capture Client.app/Contents/MacOS/SonicWall Capture Client",
"message": "The executable does not have the hardened runtime enabled.",
"docUrl": null,
"architecture": "arm64"
}
]
}
Basically what I did is use notatytool to submit
xcrun notarytool submit ./Installer/Build/4.0.1/SonicWall\ Capture\ Client.4.0.1.Beta.pkg --keychain-profile **** --wait --webhook "https://example.com/notarization"
And actually I think I have set the several necessary options.
export OTHER_CODE_SIGN_FLAGS\=--timestamp\ --options\=runtime
export CODE_SIGN_INJECT_BASE_ENTITLEMENTS\=NO
Any suggestions?
Thanks in advance