Notarizing question

[Bastiaan Olij]

Hey Andy,

Don't know if you ever looked at this but I shared my code sign and notarisation scripts a little while ago, you can find them on my dropbox:
https://www.dropbox.com/s/h5vujeba1k5xrx3/codesign%20and%20notarize.zip?dl=0


There is a script there called prepare that runs a bunch of permission fixes and things that the code signing otherwise doesn't seem to like. There are also a few typo fixes that at the time were in the docs Omnis has on their website.

One thing that always trips me up is if the code signing process gets interrupted. If it doesn't finish it leaves half processed files in place, if you retry the code signing it will try to code sign the code sign files. Funky. If this happens to you, you manually need to clear out the files the codesigning adds to your bundle.


________________________________
From: omnisdev-en <omnisdev-en-bounces at lists.omnis-dev.com> on behalf of Andy Hilton <andyh at totallybrilliant.com>
Sent: Monday, 7 September 2020 11:17 AM
To: OmnisDev List - English <omnisdev-en at lists.omnis-dev.com>
Subject: Re: Notarizing question

Ok, so utilizing the assistance from mike and Phil, I have got a little further…..

The issue with the ‘Omnis’ file itself turned out to be a timing issue of when I was trying to sign it, so that appears to be ok now (signing it at the end of the signing list !)

What I still have as an issue now though is a persistent : 'unsealed contents present in the bundle root’ error which is preventing further action - the Apple docs are less than helpful on what it may be - does anyone know any more about this one ?

I have got an amended icns file involved - which some googling suggested may be an issue - however even exchanging that for the original omnis one didn’t change anything…..


Andy Hilton
Totally Brilliant Software Inc
Phone (US) : (863) 409 4870
Phone (UK) : 0207 193 8582
Web : www.totallybrilliant.com<http://www.totallybrilliant.com> <http://www.totallybrilliant.com/>
Helpdesk : http://totallybrilliant.kayako.com
Email : andyh at totallybrilliant.com

> On Sep 2, 2020, at 11:14 PM, Andy Hilton <andyh at totallybrilliant.com> wrote:
>
> All
>
> I make my app, and follow the scripts I have previously got (an edit of Bas’s scripts) - and all passes muster, it appears notarized and stapled….
>
> I make a dmg - and again following the scripts I notarize my dmg
>
> Except this time I get a failure and following the logs, it tells me that the signature on the ‘Omnis’ app itself (TheApp/Contents/MacOS/Omnis) is invalid
>
> Anyone know why that may be and what command I should add to the prepare_build.sh script to correct it ?
>
> I am currently trying :
>
> codesign -f -o runtime --entitlements /Users/andy/Downloads/codesign/standard_entitlements.plist --timestamp --verbose -s "Developer ID Application: Andy Hilton (6UMDUSHJ58)" myAppName.app/Contents/MacOS/Omnis
> codesign -f -o runtime --entitlements /Users/andy/Downloads/codesign/extended_entitlements.plist --timestamp --verbose -s "Developer ID Application: Andy Hilton (6UMDUSHJ58)" myAppName.app/Contents/MacOS/Omnis
>
> Andy Hilton
> Totally Brilliant Software Inc
> Phone (US) : (863) 409 4870
> Phone (UK) : 0207 193 8582
> Web : www.totallybrilliant.com<http://www.totallybrilliant.com> <http://www.totallybrilliant.com/>
> Helpdesk : http://totallybrilliant.kayako.com
> Email : andyh at totallybrilliant.com
>
> _____________________________________________________________
> Manage your list subscriptions at http://lists.omnis-dev.com
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com

_____________________________________________________________
Manage your list subscriptions at http://lists.omnis-dev.com
Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com