Sign and Notarize Electron App

Hello.

I am developing an electron app with vscode. And I have some problems while signing and notarizing. I signed it with electron-osx-sign command. Then I tried notarize using xcrun notarytool submit .zip --keychian-profile "NotaryCredential" --wait.

but the result says it is invalid. so I show the notarize log. Below is the log file. It says some framework bundles are not signatured. Please check it and let me know what is the problem.

Thank you.

{
  "logFormatVersion": 1,
  "jobId": "b797a6c8-e277-4576-a422-bb2685d7c7d2",
  "status": "Invalid",
  "statusSummary": "Archive contains critical validation errors",
  "statusCode": 4000,
  "archiveFilename": "usbcopypro-encrypt.zip",
  "uploadDate": "2024-11-28T10:32:17.549Z",
  "sha256": "aaab45bc2de334cd8dc0a904a6a7183b76bb6a80c45f83e876440ae75bc19b97",
  "ticketContents": null,
  "issues": [
    {
      "severity": "error",
      "code": null,
      "path": "usbcopypro-encrypt.zip/usbcopypro-encrypt.app/Contents/MacOS/usbcopypro-encrypt",
      "message": "The signature of the binary is invalid.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087735",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "usbcopypro-encrypt.zip/usbcopypro-encrypt.app/Contents/Frameworks/Electron Framework.framework/Electron Framework",
      "message": "The signature of the binary is invalid.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087735",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "usbcopypro-encrypt.zip/usbcopypro-encrypt.app/Contents/Frameworks/ReactiveObjC.framework/ReactiveObjC",
      "message": "The signature of the binary is invalid.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087735",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "usbcopypro-encrypt.zip/usbcopypro-encrypt.app/Contents/Frameworks/Squirrel.framework/Squirrel",
      "message": "The signature of the binary is invalid.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087735",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "usbcopypro-encrypt.zip/usbcopypro-encrypt.app/Contents/Frameworks/Mantle.framework/Mantle",
      "message": "The signature of the binary is invalid.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087735",
      "architecture": "x86_64"
    }
  ]
}

It’s hard to say what’s going on here because you’re using a third-party tool to sign your app. You can find my general advice on how to sign and package a Mac product in:

I recommend that you compare that advice against what your third-party tooling is doing.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Sign and Notarize Electron App
 
 
Q