-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Sign the Mac Release #205
Comments
We decided to leave the Mac OS/X version unsigned for now -- this issue is no longer part of the 1.0 release. We have had longstanding problems with this:
|
With the new MacOS, you need to either sign (all of) the dynamic libraries the app uses in addition to signing the app itself, or (if you build/sign with Xcode) mark (among the capabilities, I think) that it should not validate the dynamic libraries. I tried both approaches with my app that uses OpenSSL, and settled on the 2nd: just don't validate the libs. |
@mouse07410 That is quite interesting. Thanks for your comment! We sign our product as follows:
How would one proceed to "not validate the libs"? set an xattr (before) or (after) the signing? Is this flag one you used, or is it some other flag / something else? https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_security_cs_disable-library-validation We'd be happy about any further information about your process :) However, we do not use Xcode -- we have to sign everything directly from the command line... |
Update 2021: Still no working signatures for Mac |
This issue is just for the record.
@dschadow is currently working on this.
The text was updated successfully, but these errors were encountered: