On 8/22/15 10:44 PM, Brendan Simon (eTRIX) wrote:
$ codesign -vvvv -f --deep -s <mycredentials>dist/<myapp>.app
The "deep" flag doesn't work anymore. Pretty much every binary object
must be signed.
Here's what I use to codesign one of my apps (the specific example is
Perl, my current Python project is awaiting an update, but I'll roll
something similar for the Python project).
First I start with the dylibs:
find build/FileMorph.app -type f -name "*.bundle" -exec codesign
--verbose --signature-size 9400 -f -s "My Credentials" {} \;
find build/FileMorph.app -type f -name "*.dylib" -exec codesign
--verbose --signature-size 9400 -f -s "My Credentials" {} \;
Next, the frameworks and executables:
codesign --verbose --signature-size 9400 -f -s "My Credentials"
build/FileMorph.app/Contents/Frameworks/Tk.framework/Versions/8.6/Resources/Wish.app/Contents/MacOS/Wish
codesign --verbose --signature-size 9400 -f -s "My Credentials"
build/FileMorph.app/Contents/Frameworks/Tk.framework/Versions/Current
codesign --verbose --signature-size 9400 -f -s "My Credentials"
build/FileMorph.app/Contents/Frameworks/Tcl.framework/Versions/Current
codesign --verbose --signature-size 9400 -f -s "My Credentials"
build/FileMorph.app/Contents/MacOS/perl
Finally, the app itself:
codesign --signature-size 9400 -f -s "My Credentials" --verbose=2
build/FileMorph.app
Is it a certificate issue perhaps? I purchased a class2 cert from
sslstart.com. I was a renewed one and I'm not 100% sure I'm using the
correct private key for the certificate. Would that cause the above
errors?
I don't know if that's the specific issue here, but I do know that
Gatekeeper does not recognize certificates from authorities other than
Apple--not sure if codesign itself would flag a signature as non-valid
if the cert was not issued by Apple's developer group.
--Kevin
--
Kevin Walzer
Code by Kevin/Mobile Code by Kevin
http://www.codebykevin.com
http://www.wtmobilesoftware.com
_______________________________________________
Pythonmac-SIG maillist - Pythonmac-SIG@python.org
https://mail.python.org/mailman/listinfo/pythonmac-sig
unsubscribe: https://mail.python.org/mailman/options/Pythonmac-SIG
