Code signing 10.2 runtime with obrowser

[Andy Hilton]

Das

It *works* but doesn’t render correctly - it needs all three apps correctly signed to render fully…..

Andy Hilton
Bypass Productions LLC dba Jim Flynn Rentals
276 Meserole St, Brooklyn, NY 11206
Phone : 212 807 1800 
Web : www.jimflynnrentals.com <http://www.jimflynnrentals.com/> 
Email : andy at jimflynnrentals.com <mailto:andy at jimflynnrentals.com>






> On Dec 6, 2020, at 12:40 PM, Das Goravani <goravanis at gmail.com <mailto:goravanis at gmail.com>> wrote:
> 
> 
> Now I’ve tried it on 10.2 and Big Sur and it works fine.  I don’t even do the code signing step Omnis gives for oBrowser.. I eliminated it from my lineup of code signing figuring that step 3, for me, goes deep and signs everything.. and it works.. oBrowser works without the additional steps. 
> 
> 
> 
>> On Dec 6, 2020, at 9:24 AM, Das Goravani <goravanis at gmail.com <mailto:goravanis at gmail.com>> wrote:
>> 
>> Andy,
>> 
>> I code sign without your new input, and it seems to make a legit installer that works, but are you saying oBrowser won’t run for me with 10.2.. I haven’t tried it out yet.. 
>> 
>> Das
>> 
>>> On Dec 6, 2020, at 6:28 AM, Andy Hilton <andyh at totallybrilliant.com <mailto:andyh at totallybrilliant.com>> wrote:
>>> 
>>> To anyone wanting to use obrowser in 10.2, please note Omnis have slightly changed the Chromium Embedded Framework for 10.2 and you need to add a couple of additional lines to your code signing script as there are now 3 apps embedded in the obrowser xcomp - what also then tripped me up for a while was how you actually need to encode these file names too - the 2 extra files are : 
>>> 
>>> Helper (GPU).app and Helper (Renderer).app
>>> 
>>> But the ( and ) characters within the app names need the same treatment as spaces do, so the extra line required are as per below :
>>> 
>>> codesign -f -o runtime --entitlements <path to folder containing>/extended_entitlements.plist --timestamp --verbose -s "Developer ID Application: <developer details>” <appname>.app/Contents/MacOS/xcomp/obrowser.u_xcomp/Contents/Frameworks/obrowser\ Helper\ \(GPU\).app/
>>> codesign -f -o runtime --entitlements <path to folder containing> /extended_entitlements.plist --timestamp --verbose -s "Developer ID Application: <developer details>"  <appname>.app/Contents/MacOS/xcomp/obrowser.u_xcomp/Contents/Frameworks/obrowser\ Helper\ \(Renderer\).app/
>>> 
>>> And now the obrowser component will work after signing :)
>>> 
>>> Andy Hilton
>>> Totally Brilliant Software Inc
>>> Phone (US) : (863) 409 4870 
>>> Phone (UK) : 0207 193 8582
>>> Web : www.totallybrilliant.com <http://www.totallybrilliant.com/> <http://www.totallybrilliant.com/ <http://www.totallybrilliant.com/>> 
>>> Helpdesk : http://totallybrilliant.kayako.com <http://totallybrilliant.kayako.com/>
>>> Email : andyh at totallybrilliant.com <mailto:andyh at totallybrilliant.com>
>>> 
>>> Nb I found this by dragging one of the named apps into Terminal which then showed me the correct way to name it in my script !!!!
>>> _____________________________________________________________
>>> Manage your list subscriptions at http://lists.omnis-dev.com
>>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com 
>> 
>> _____________________________________________________________
>> Manage your list subscriptions at http://lists.omnis-dev.com <http://lists.omnis-dev.com/>
>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com <mailto:omnisdev-en at lists.omnis-dev.com> 
> 
> _____________________________________________________________
> Manage your list subscriptions at http://lists.omnis-dev.com <http://lists.omnis-dev.com/>
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com <mailto:omnisdev-en at lists.omnis-dev.com> 



Andy Hilton
Totally Brilliant Software Inc
Phone (US) : (863) 409 4870 
Phone (UK) : 0207 193 8582
Web : www.totallybrilliant.com <http://www.totallybrilliant.com/> 
Helpdesk : http://totallybrilliant.kayako.com
Email : andyh at totallybrilliant.com