2

I don't have an Apple Developer ID and I have an installer and app, neither signed nor notarized. Apple now blocks the App in Catalina and even the Open option won't work. Rather than I seek information to authenticate these.

What is the process to register and notarize for macOS?

Update: I'm asking from the developer's perspective .. not as a user.

2
  • Do you want to distribute the installer and application to the general public or within a controlled environment like a school or organisation? Commented Feb 11, 2020 at 12:34
  • 1
    @GrahamMiln General Public.I currently do not use AppStore.
    – techno
    Commented Feb 12, 2020 at 2:25

1 Answer 1

1

Limited Options

As a developer wanting to distribute unsigned and unnotarized applications, your options are increasingly limited on macOS. You would not be alone disliking this trend.

If your users are technical, the advice from Apple can be referenced in your documentation. This will help a few potential users but will dramatically limit your audience.

Apple's Advice to Users

Apple provide Safely open apps on your Mac for users wishing to open unsigned and unnotarized applications on the latest versions of macOS.

Alternative Certificate Authority

In theory, you could code sign your application using another certificate authority that has an appropriate root certificate pre-installed in macOS. This assumes you wish to avoid dealing with Apple, rather than wishing to avoid code signing.

Is an Apple Developer Account Mandatory?

I suspect an Apple Developer Account is not mandatory, but not having an account will make some tasks difficult.

Given you have a code signing certificate from Comodo (Sectigo), you could try using codesign with it.

The manual for codesign does not obviously state a requirement for an Apple issued certificate. A code signing certificate with a trusted root certificate in macOS should be useable.

You will need to create a new Keychain containing the certificate and private key. Then pass the absolute path of the keychain file to codesign via --keychain.

One possible problem you may run into is macOS's spctl, aka Gatekeeper. spctl's rules may state the signing certificate must have a root Apple certificate. Investigate the spctl tool on macOS.

I recommending trying codesign with your certificate and then ask more questions as specific problems arise.

4
  • Thanks.I already have a code signing certificate from Comodo(Sectigo) which is used to sign my windows app.Can this be used in OSX as well ? Is signing up for Apple Dev program mandatory?
    – techno
    Commented Feb 12, 2020 at 11:53
  • I have expanded the answer. Good luck! As an aside, Indie might be useful to you. Commented Feb 12, 2020 at 12:14
  • I have tried signing my existing application using stackoverflow.com/questions/13204407/… but i keep getting this exception developer.apple.com/library/archive/qa/qa1940/_index.html . Can you please advice
    – techno
    Commented Feb 18, 2020 at 3:26
  • @techno please can you ask a new question, as this will attract answers. Comments tend to be less visible. For example, I did not get a notification from your follow up comment. Commented Feb 29, 2020 at 18:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .