Latest Apple Notarisation

[Das Goravani]

Phil, I remember you saying you do it that way.. 

Yeah, it’s true WHEN will Apple outlaw notarizing under older OS’s.. ie Catalina.. I imagine it will be awhile.. for the problem they say with deep is that “it causes problems” they mean in signing itself.. it inserts things.. but if it notarizes, then what’s the problem?  They will come up with some reason to outlaw it, most likely. 

Could you share if not the Omnis code the concept step by step to build a list of files within Omnis? 

Then, could you share the script that signs them.. some of us don’t know how to write scripts at all. I don’t. 

I also don’t know how to call a script from within Omnis which we have to do using your scheme. 

Your way is what they are recommending we do now to be on the latest OS and Xcode. Basically we are to go in and sign the code manually as you are doing.. rather than using the deep command with our signing in Terminal.

So what are the details of how you do this.. please share at least the script that does the signing.. I think most of us can figure out how to build a list of files inside the Omnis tree.. though I would appreciate help knowing WHAT to sign.. or as you say do overkill and sign it all

Script and any input on building the list.. please.. Thanks.. 

Das Goravani

> On Sep 28, 2021, at 5:17 AM, Phil (OmnisList) via omnisdev-en <omnisdev-en at lists.omnis-dev.com> wrote:
> 
> Hi Das,
> 
> I haven't recently tried notarizing, but I always codesigned each and every file individually, not using a deep command...
> 
> I used an omnis lib to recursively find files in the app, and then in reverse order, created a script to codesign every file with standard entitlements, and then finalised with an executable entitlement on, in your case, the 'omnis' executable.
> 
> It also finalises with using Ditto to create ad zip file which is the file uploaded for notarization.
> 
> I originally did this when I did not know what needed codesigning, and it seems to continue to work, even though its probably overkill.
> 
> This worked fine on Big Sur using xcode 12.5.1
> 
> Ok, just retried this, and yes, it notarized just fine.
> 
> regards
> Phil Potter
> Based in Chester in the UK.
> 
> On 27/09/2021 19:17, Das Goravani wrote:
>> URGENT:  One can NO LONGER NOTARIZE using the Omnis Inc. tech note on Notarization, as of BigSur and Xcode 12. The alternative being presented by Apple is exceedingly complex and requires advanced knowledge of building apps and Mac scripting. This issue needs to be immediately worked on by Omnis Inc. and a solution presented to us developers as soon as possible. Some of us have older VM’s that we can sign on but some do not have those. As of BigSur and Monterey and going forward WE ARE STUCK.
>> 
>> My post to Apple Developer Forums that got answered by an Engineer
>> 
>> https://developer.apple.com/forums/thread/687480?answerId=684248022#684248022 <https://developer.apple.com/forums/thread/687480?answerId=684248022#684248022>
>> 
>> 
>> Article on Manually Signing an App (very complex, requires knowledge of scripting, Omnis needs to do this for us)
>> 
>> https://developer.apple.com/forums/thread/130855 <https://developer.apple.com/forums/thread/130855>
>> 
>> 
>> I could NOT follow this myself. I don’t know scripting and I don’t know App structural words and concepts.
>> 
>> If I did not have a Catalina VM and Xcode 11 to sign with I would be STUCK.
>> 
>> I imagine others are STUCK.
>> 
>> This is URGENT and I think OMNIS needs to handle this again.
>> _____________________________________________________________
>> Manage your list subscriptions at http://lists.omnis-dev.com
>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> 
> _____________________________________________________________
> Manage your list subscriptions at http://lists.omnis-dev.com
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com