Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sign the Mac Release #205

Open
grthor opened this issue Jun 2, 2020 · 4 comments
Open

Sign the Mac Release #205

grthor opened this issue Jun 2, 2020 · 4 comments
Labels
Build OS/X Problems under OS/X

Comments

@grthor
Copy link
Member

grthor commented Jun 2, 2020

This issue is just for the record.

@dschadow is currently working on this.

@grthor grthor added the Build label Jun 2, 2020
@grthor grthor added this to the Final 1.0.0 milestone Jun 2, 2020
@simlei
Copy link
Member

simlei commented Oct 27, 2020

We decided to leave the Mac OS/X version unsigned for now -- this issue is no longer part of the 1.0 release. We have had longstanding problems with this:

  • Only one person can test the signing properly as the key is linked with the apple account
  • Signing the app currently renders it unopenable ("could not load dynamic linked library")

@simlei simlei closed this as completed Oct 27, 2020
@simlei simlei reopened this Oct 27, 2020
@simlei simlei removed this from the Final 1.0.0 milestone Oct 27, 2020
@mouse07410
Copy link

With the new MacOS, you need to either sign (all of) the dynamic libraries the app uses in addition to signing the app itself, or (if you build/sign with Xcode) mark (among the capabilities, I think) that it should not validate the dynamic libraries.

I tried both approaches with my app that uses OpenSSL, and settled on the 2nd: just don't validate the libs.

@simlei
Copy link
Member

simlei commented Oct 27, 2020

@mouse07410 That is quite interesting. Thanks for your comment!

We sign our product as follows:

codesign -f -v --timestamp --sign "xxxxxxxxx" --options=runtime JCrypTool.app 

How would one proceed to "not validate the libs"? set an xattr (before) or (after) the signing?

Is this flag one you used, or is it some other flag / something else? https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_security_cs_disable-library-validation

We'd be happy about any further information about your process :) However, we do not use Xcode -- we have to sign everything directly from the command line...

@simlei
Copy link
Member

simlei commented Jan 26, 2021

Update 2021: Still no working signatures for Mac

@simlei simlei added the OS/X Problems under OS/X label Jan 26, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Build OS/X Problems under OS/X
Projects
None yet
Development

No branches or pull requests

3 participants