Notarizing question

[Mike Matthews - Omnis]

Sorry about any odd swaps of links, try this one

I found some components were the problem, so I found the recursive command :). Then I redo the lot again.

To remove Xtended Finder Attributes for v8 & v10 Dev & Client versions: (quick)

sudo xattr -rc /Users/mike/Desktop/notarisation/SourceFiles/name_of_app


Mike











> On 3 Sep 2020, at 11:49, Phil (OmnisList) via omnisdev-en <omnisdev-en at lists.omnis-dev.com> wrote:
> 
> Hi Mike,
> 
> unless I am mistaken, he is not talking about the rest of the App., just the actual executable within the App...
> 
> Sounds like he already has a script for the rest of the app structure...
> 
> I recall an issue with our executable, a renamed omnis,  but cannot recall exactly what it was I did to correct it.
> 
> Our solution may even of been, don't touch it, just codesign the stuff we have added or modified.
> 
> When you say clear down, are you just meaning the --force on codesigning stuff again?
> Or something else?
> 
> Out of curiosity, how did you recursively go inside all folders?
> I ended up created a library that generated a script file with a codesign line for each file in the App structure.
> Noting that apple say that the -r option is what you do at the end to finalise it?
> 
> I subsequently reduced the script to things that actually change so that the notarization process was a bit quicker.
> 
> I recall getting caught out with the scripts we ran in the installer created with packages, failing to codesign them as well caused the package not to be notarised.
> 
> regards
> Phil Potter
> Based in Chester in the UK.
> 
> On 03/09/2020 10:04, Mike Matthews - Omnis wrote:
>> I’ll send you my parts that fixes this problem.
>> 
>> You have to clear down existing settings, recursively inside all folders, including xcomps.
>> 
>> Mike
>> 
>> 
>> 
>> On 3 Sep 2020, at 04:14, Andy Hilton <andyh at totallybrilliant.com<mailto:andyh at totallybrilliant.com>> wrote:
>> 
>> All
>> 
>> I make my app, and follow the scripts I have previously got (an edit of Bas’s scripts) - and all passes muster, it appears notarized and stapled….
>> 
>> I make a dmg - and again following the scripts I notarize my dmg
>> 
>> Except this time I get a failure and following the logs, it tells me that the signature on the ‘Omnis’ app itself (TheApp/Contents/MacOS/Omnis) is invalid
>> 
>> Anyone know why that may be and what command I should add to the https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fprepare_build.sh&c=E,1,8lvYqp9L12JdP-VGZN3PJGIJrcHV_36g7SKOiOLzhqWi20ZaFK_N-laBsJQ1teicJpsHpEDuvYJ8KF2t8MeIXyJs5m-u_sF9uBFFRRfHraWizNiAtBf8MxtKfA,,&typo=1 script to correct it ?
>> 
>> I am currently trying :
>> 
>> codesign -f -o runtime --entitlements /Users/andy/Downloads/codesign/standard_entitlements.plist --timestamp --verbose -s "Developer ID Application: Andy Hilton (6UMDUSHJ58)" https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fmyAppName.app%2fContents%2fMacOS%2fOmnis&c=E,1,uXcHox7-gUuTj7Ndh2pp1XLHHVqH32-gv7dBFi4KWbHOYG1R38xQ-rA08lAq3HGms8wh9t6zi4ZHmeBq-JS_fUYb999bnD4ii3wokUf2vN8vPQXOVQ,,&typo=1
>> codesign -f -o runtime --entitlements /Users/andy/Downloads/codesign/extended_entitlements.plist --timestamp --verbose -s "Developer ID Application: Andy Hilton (6UMDUSHJ58)" https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f%2f%2fmyAppName.app%2fContents%2fMacOS%2fOmnis&c=E,1,qVRLYdbvq7Mo0PhIfikpwqUgP9BJ9DOENexXhmvG-Bz6dlzW3TFK_iRHJ70GKEETjpwJ-31JOnt2Qot6Ay9oV18O3-ahLYCt-rtQpcFuMQc00v0FFRCk3VXz&typo=1
>> 
>> _____________________________________________________________
>> Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.omnis-dev.com&c=E,1,zJDh8OXQcxBJZGUVWeaycTWr5-JsGNpRRdrWafucEpDCaM7QeRWdwk8ytdFc-qWPVAstieTzMRiNGFnuVwGjXwIP1VC2YvalpU1DpoOg0do,&typo=1
>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> _____________________________________________________________
> Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=http%3a%2f%2flists.omnis-dev.com&c=E,1,GLLiG3A4mmqRprDeJza2aPobDSHNxfBFBOrftnXHx8yP2gLXC4cBoSPMgGTykcTurR-XciBurMwMIBVmxVEV9VRyJjyny1UKlhLtQnBCB_zRIDRO&typo=1
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com