Re: AW: Another (macOS) Code signing guidance question...

2023-10-10 Thread panagiotis merakos via use-livecode
Hello all, Just downloading the certificate from your account in the apple dev website, and using it in a different machine from the one it was created will not work (you get identity not found), because you need the private key as well. This is why you have to export the certificate from the

Re: AW: Another (macOS) Code signing guidance question...

2023-10-10 Thread J. Landman Gay via use-livecode
On 10/10/23 4:16 PM, Paul Dupuis via use-livecode wrote: The hardest part was getting the correct Certificates into the Keychain on the macBook Air. When code signing I kept getting an "identity not found" (or something like that) that meant I didn't have the "right" certificate or the

AW: Another (macOS) Code signing guidance question...

2023-10-10 Thread Paul Dupuis via use-livecode
Under macOS 14.0 Sonoma on a M1 macBook Air,  I have set up the Command Line Tools for XCode 15.0 and have successfully signed, notarized, and stapled a Livecode Standalone using the new Apple notarization command that goes into effect on November 1, 2023 Effect 1-NOV-2023, the notarization

Re: Another (macOS) Code signing guidance question...

2023-10-10 Thread matthias rebbe via use-livecode
Paul, you should be able to download and "install" the Apple certificates directly in Xcode. To do so, open settings in Xcode and select "accounts" icon. There you should see a window which allows you to manage your certificates which also includes to install them. Matthias > Am 10.10.2023

Re: Can't codesign Mac app

2023-10-10 Thread doc hawk via use-livecode
jacqui juggled, So then I tried notarizationHelper V4 but keep getting "no identity found" errors. Ah. An identity crisis! :) ___ use-livecode mailing list use-livecode@lists.runrev.com Please visit this url to subscribe, unsubscribe and manage your

Re: Can't codesign Mac app

2023-10-10 Thread J. Landman Gay via use-livecode
On 10/10/23 2:19 AM, matthias rebbe via use-livecode wrote: Hello Jacque, didn't you get the reason back why the app is rejected when you run 'spctl --assess --raw --verbose ' ? No, all I got was what I posted. It was very short. I am not sure why your app i rejected. If you want to, i

Re: Can't codesign Mac app

2023-10-10 Thread J. Landman Gay via use-livecode
On 10/10/23 1:07 AM, panagiotis merakos via use-livecode wrote: Have you included any entitlements when codesigning the app? I suggest including all of these: https://lessons.livecode.com/m/4071/l/1293515-entitlements-for-signed-and-notarized-apps There is an option to do that in the settings

Re: Another (macOS) Code signing guidance question...

2023-10-10 Thread Paul Dupuis via use-livecode
On 10/10/2023 12:36 PM, J. Landman Gay via use-livecode wrote: I got that far at least. I couldn't notarize on Monterey but my client on Sonoma had no problem using mrSignNotarizeHelper on Sonoma with Xcode 15. My issues happened after that. So I think you're safe using the tool on Sonoma.

Re: Another (macOS) Code signing guidance question...

2023-10-10 Thread J. Landman Gay via use-livecode
I got that far at least. I couldn't notarize on Monterey but my client on Sonoma had no problem using mrSignNotarizeHelper on Sonoma with Xcode 15. My issues happened after that. So I think you're safe using the tool on Sonoma. -- Jacqueline Landman Gay | jac...@hyperactivesw.com HyperActive

Re: Another (macOS) Code signing guidance question...

2023-10-10 Thread Paul Dupuis via use-livecode
On 10/10/2023 11:43 AM, Paul Dupuis via use-livecode wrote: I am looking at https://developer.apple.com/support/xcode To meet Apple's Nov 1 deadline of switch from the old Notarization tool (which I current use on Mojave) to the new one, I need to get set up on macOS 14 Sonoma. To me, from

Re: Another (macOS) Code signing guidance question...

2023-10-10 Thread Bob Sneidar via use-livecode
There’s this: https://support.apple.com/en-us/HT204904 I’m fairly certain that it will install the most recent version of MacOS however. To install the original MacOS, there’s this: https://support.apple.com/guide/mac-help/erase-and-reinstall-macos-mh27903/mac Bob S > On Oct 10, 2023, at

Re: Another (macOS) Code signing guidance question...

2023-10-10 Thread Marty Knapp via use-livecode
I’ve been using AppWrapper for a few years and just deployed an upgrade for Sonoma compatibility. I don’t use the app store - just sell from my own web site. It’s a paid app but has a free trial: https://ohanaware.com/appwrapper/ --- Marty Knapp > On Oct 10, 2023, at 8:43 AM, Paul Dupuis via

Another (macOS) Code signing guidance question...

2023-10-10 Thread Paul Dupuis via use-livecode
I am looking at https://developer.apple.com/support/xcode To meet Apple's Nov 1 deadline of switch from the old Notarization tool (which I current use on Mojave) to the new one, I need to get set up on macOS 14 Sonoma. To me, from the Apple page, it look like I need xcode 15 (deployment

Re: Window code signing certificate source recommendations

2023-10-10 Thread matthias rebbe via use-livecode
Paul, just googled a little bit... If you have a safenet USB Token, than there seems to be a way to disable the password pop up. https://www.finalbuilder.com/resources/blogs/code-signing-with-usb-tokens > Am 10.10.2023 um 15:05 schrieb Paul Dupuis via use-livecode > : > > On 10/10/2023 8:53

Re: Window code signing certificate source recommendations

2023-10-10 Thread Paul Dupuis via use-livecode
On 10/10/2023 8:53 AM, matthias rebbe via use-livecode wrote: Hello Paul, unfortunately this is the "new" standard. Since 1st June 2023 private keys has to be stored on a Token. https://www.sslpoint.com/new-private-key-storage-requirement-for-standard-code-signing-certificates/ There is no

Re: Window code signing certificate source recommendations

2023-10-10 Thread Paul Dupuis via use-livecode
On 10/10/2023 8:38 AM, Brian Milby via use-livecode wrote: While not directly applicable, you may be able script it similar to using a CAC. DOD uses Smart Cards for authentication and you can have command line tools use the card for authentication (runas /smartcard program). What happens is

Re: Window code signing certificate source recommendations

2023-10-10 Thread matthias rebbe via use-livecode
Hello Paul, unfortunately this is the "new" standard. Since 1st June 2023 private keys has to be stored on a Token. https://www.sslpoint.com/new-private-key-storage-requirement-for-standard-code-signing-certificates/ There is no way anymore to export a certificate for example to .pfx. And much

Re: Window code signing certificate source recommendations

2023-10-10 Thread Brian Milby via use-livecode
While not directly applicable, you may be able script it similar to using a CAC. DOD uses Smart Cards for authentication and you can have command line tools use the card for authentication (runas /smartcard program). What happens is that you get a pop up from the system to choose cert and

Window code signing certificate source recommendations

2023-10-10 Thread Paul Dupuis via use-livecode
To any with a recommendation: I have been getting my Windows Code Signing Certificates from Comodo. I have been able to get certs in file formats like .pfx or .p12 that allows me to code sign using a single command line with the password as part of the command. This lets me script code

Re: Can't codesign Mac app

2023-10-10 Thread matthias rebbe via use-livecode
Hello Jacque, didn't you get the reason back why the app is rejected when you run 'spctl --assess --raw --verbose ' ? I've tested here now with a simple LC app which opens an https url. The https call makes sure, that revsecurity is included in the app bundle. I've code signed and notarized

Re: Can't codesign Mac app

2023-10-10 Thread panagiotis merakos via use-livecode
Hello Jacque, Have you included any entitlements when codesigning the app? I suggest including all of these: https://lessons.livecode.com/m/4071/l/1293515-entitlements-for-signed-and-notarized-apps There is an option to do that in the settings (iirc) in Matthias' notarization tool. Kind