Notarization status: Invalid

I have a script that builds a macOS application, does the code signing and then does the zip and notarization.

For the notarization:

ZIPPATH="/Users/AProgrammer/dev/App.zip"

/usr/bin/ditto -c -k --keepParent "$APPPATH" "$ZIPPATH"

xcrun notarytool submit "$ZIPPATH" --keychain-profile 'appbuild-notary' --wait --timeout 5m

Conducting pre-submission checks for App.zip and initiating connection to the Apple notary service...
Submission ID received
  id: 4dd17e33-5ea0-4e55-a859-a207ec88a4b1
Successfully uploaded file35.3 MB of 35.3 MB)
  id: 4dd17e33-5ea0-4e55-a859-a207ec88a4b1
  path: /Users/AProgrammer/dev/App.zip
Waiting for processing to complete. Wait timeout is set to 300.0 second(s).
Current status: Invalid...........
Processing complete
  id: 4dd17e33-5ea0-4e55-a859-a207ec88a4b1
  status: Invalid

This was working a few weeks ago, but now the notarization process shows as Invalid. I have run this many times, with the same result. The stapling step cannot complete as the notarization is not valid.

Is this an issue with the notarization server?

Thanks, Don Metzler

Replies

I found using the xcrun notarytool log tool that an embedded binary was not codesigned correctly. I added a code sign step for this and the notarization is fixed.

@donmetzler thanks for the followup comment - do you remember by chance what command you used for codesigning and did you code sign the whole .app folder?

I don't know much about the process and have a pyinstaller app that I'm trying to get notarized but it gives me the invalid status as you got.