Questions tagged [code-signing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Problem with signing GDB on Big Sur

I am trying to make GNU debugger gdb work on macOS 11.6 Big Sur. You need to sign the binary to make it work. I use instructions from here: https://sourceware.org/gdb/wiki/PermissionsDarwin However, ...
0
votes
0answers
21 views

Application get sigkill on launch

When I launch certain applications, they don't launch. Running them in iTerm gets sigkill. Running them in gdb does not output any debug information. Running them with dtruss does not output any debug ...
1
vote
0answers
25 views

How to code sign hidden files?

I have a hidden dylib file that is preventing notarization. The LogFileURL indicates the file is not signed and does not have a valid time stamp. I tried to sign the file separately using the path to ...
21
votes
1answer
3k views

Why am I able to run my own app without code signing?

I have a little open-source Qt app I wrote and then compiled on my Mac. I ran macdeployqt and copied it to my /Applications folder, and it runs without complaint. Ultimately I plan to sign this app ...
0
votes
0answers
37 views

Disabling application signing/integrity protection

I'm using a macOS 10.15 Parallels virtual machine for development purposes. It is very slow (compared to a macOS 10.13 VM), and I spend a couple of hours extracting XCode. Now, when I try to open ...
0
votes
1answer
58 views

GPG constantly throwing "no such file or directory" when doing operations

So I want to create a GPG so I can use it. I did gpg --gen-key, put in the information but it threw theNo such file or directory error (see below). ❯ gpg --gen-key gpg (GnuPG) 2.3.1; Copyright (C) ...
1
vote
2answers
62 views

Distribute an app directly to customers: MacOS vs. iOS

I have a Developer Program subscription ("Enrolling as an Individual", not as an Organization). With MacOS, it's possible to code-sign / notarize an app, and ship the .dmg / .pkg to ...
0
votes
1answer
52 views

Do I need the Developer Program to sign an app for my own use?

I installed iTerm2 from MacPorts; since it was built from source, it wasn’t notarized. If I want to sign it for my own usage (not distributing any app), do I need to (pay $99 and) join the Developer ...
0
votes
0answers
38 views

Notarized and stapled app can't be opened by other users

Used to get users to simply run chmod, but recently I got an Apple developer account and set up by signing, notarizing, then stapling the application. Although, on a friend's laptop I'm still getting &...
1
vote
1answer
566 views

inscrutable rules for disallowing binaries on a new Apple Silicon (Big Sur) machine [closed]

EDIT: This problem appears to have been a bug in the Apple code signing mechanism, and has been fixed in the 11.1 Big Sur release candidate. At the moment I write this, you need to enrol in the Apple ...
2
votes
0answers
456 views

Apps downloaded from Mac App Store won't start due to invalid signature

I'm currently trying to resurrect my 2010 MacBook Pro 15" while my 2015 is away for repairs. The latest it can run is macOS 10.13.6. After installing all the latest OS updates and security ...
7
votes
4answers
3k views

What harm will denying ocsp.apple.com do?

After the recent issue of trustd trying to connect to Apple's overloaded servers, and causing slowdowns to Macs around the world, one discussion page suggested a temporary fix: This command in ...
1
vote
0answers
453 views

Codesign states code object is not signed at all

I have noticed this before too on some executable files. Recently, I downloaded cmake and used codesign to check if it's digitally signed but it states, it's not signed at all: % codesign -v /Volumes/...
2
votes
1answer
708 views

Fixing: "There are no devices registered in your account" without a Lightning cable Xcode 11.0

Using Xcode, when I try to sign my app, I get an error that says: Failed to create provision profile There are no devices registered in your account on the developer website. Plug in and select a ...
1
vote
1answer
166 views

Handling permissions to run a bash script

I'm sending a bash script as a .command file to a friend. This person is not very tech savvy which is why I'm sending it in the first place, the goal is for the .command file to run through the shell ...
1
vote
1answer
64 views

which certificate/identifiers/profilers should be used for python script to be distributed as a pyinstaller build/bundle outside the app store?

My program works as follows In a while loop, it checks for the active window change - AppKit library used from AppKit import NSWorkspace active_window = (NSWorkspace.sharedWorkspace()....
3
votes
2answers
3k views

How to code-sign my python script / package packaged for mac using pyinstaller without using xcode?

I have written a python script and bundled it using the PyInstaller. The executable file inside the dist folder works fine on my Mac. But not on someone else's Mac even if they've set "App Store ...
2
votes
1answer
138 views

Executing bundled shell command in a hardened runtime application

I have written a Java application which I want to distribute in form of a macOS application bundle. The application needs to execute a command line application which is also part of the bundle. The ...
0
votes
0answers
33 views

macOS Server: How to sign enrollment profiles?

I am wondering how to sign enrollment profiles for macOS Server. Ideally, I would like to avoid paying money. In any case, how do you do it?
2
votes
2answers
1k views

Signed pkg using productbuild --distribute but codesign says "code object is not signed at all"

I am signing my package during distribution using SIGN_IDENTITY_INSTALLER="Developer ID Installer: Pxxxxxxx, LLC (AXXXXXXXXX)" productbuild --distribution final-distribution.xml --package-path /tmp/...
2
votes
0answers
267 views

How to view expiration date of code signing cert?

I know pkgutil --check-signature and codesign -d -vvv but neither of them show the expiration date. Is there a way to view the expiration date of a code signing cert? Say for instance...macOS ...
1
vote
1answer
100 views

Need to solve “Can’t be opened because it is from an unidentified developer" by any other way than changes the Security and Privacy settings

We have created one .app application which will place some files under the user location “/Users//Library/” on executing that. Basically, that app is a shell script app in which .app file is created ...
25
votes
1answer
54k views

macOS Catalina: "App is damaged and can't be opened. You should move it to the trash."

Experiencing a problem with several apps after installing macOS Catalina. When the app is downloaded from the internet I get the error: "APP NAME" is damaged and can't be opened. You should move ...
1
vote
0answers
221 views

How to add Sudo Insults with TouchID without disabling SIP

I am following a guide to recompile sudo with insults. However, I felt uncomfortable disabling SIP so I modified it a bit to allow me to use it with SIP enabled. Unfortunately recompiling sudo broke ...
1
vote
0answers
59 views

How can I programmatically (CLI or code) retrieve the certificate used to sign an app bundle?

I'm interested in knowing when the key used to sign one of my macOS applications has changed after an update. How can I get information about which developer certificate was used to sign a given ...
4
votes
1answer
22k views

Xcode 10: Failed to create Provisioning Profile - There are no devices registered

When I try to create a profile to build an iOS app by going to Project → General → Signing, and selecting my Team (Personal), I get two errors: Failed to create provisioning profile. There are ...
2
votes
1answer
802 views

Bypassing Gatekeeper in macOS Mojave 10.14.5

At least until macOS Mojave 10.14.4, a user could run any application on a Mac, signed or not, by right clicking it in Finder and manually selecting Open. Does this still work for all applications ...
1
vote
2answers
1k views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
1
vote
1answer
587 views

codesign still tries to access other keychains when adding --keychain parameter

we have a automated codesigning setup on our CI/CD infrastructure which is using the codesing command to resign a iOS application with a certificate located in a specific keychain. The codesign script ...
0
votes
1answer
479 views

Is paid Apple Developer Program subscription required to distribute test IPA file?

I am building an Ionic app, and I want to distribute it to a few people in my organization. Ionic Cordova iOS build command runs successfully. Now i need to generate the IPA file to install the app ...
5
votes
1answer
894 views

Deploy iOS app on personal devices

I've been working on a small iOS app, intended as a gift to some family members. To my dismay, I'm finding a lot of barriers to attempting to deploy the app. It largely revolves around signing the app ...
11
votes
3answers
4k views

Should I sign open source code myself?

I use macOS 10.14 and came across a problem when I tried to install an open source plugin for Vim that I found on Github. I downloaded the source code and compiled it myself, which worked well, but ...
7
votes
3answers
3k views

Xcode saying Network Extension capability is not enabled when it is

I have been having a lot of issues for the last two weeks trying to sign and distribute a 3rd party MacOS app. I am unable to sign an app with Xcode properly because Xcode is saying that I do not have ...
5
votes
1answer
2k views

Gatekeeper refuses validly signed application

I am trying to publish a signed application, but when downloading it through internet, gatekeeper complains: Furthermore, the help page says that the app has been tampered with: Which is actually ...
2
votes
1answer
3k views

How to disable codesign check on Logic Pro X plug-ins?

I run Logic Pro X and other software to make music, and some third party plugins make the program crash if they get a: Exception Type: EXC_BAD_ACCESS (Code Signature Invalid) I can solve this ...
6
votes
2answers
13k views

Load untrusted kernel extension in macOS Mojave

The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave. This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
1
vote
1answer
513 views

Errors running certain apps under macOS 10.14 Mojave Beta 10

Apple Mac Pro (early 2009) 4,1 -> 5,1 Firmware upgraded macOS 10.14 Mojave Beta 10 Tweetbot 3.1 Hello, I upgraded my machine to Mojave Beta 10 yesterday via a somewhat devious route http://...
2
votes
1answer
1k views

3rd Party Mac Developer Application: DEVELOPER NAME: no identity found

I need to sign the code of an app I'm trying to submit to App Store through terminal: codesign -f -s '3rd Party Mac Developer Application: DEVELOPER NAME' --entitlements "APPNAME.entitlements" "/...
3
votes
0answers
288 views

High Sierra installer has "sealed resources" v2 but says "resource envelope is obsolete"

Setting up a new laptop... I downloaded the Install macOS High Sierra.app from the app store on an El Capitan machine. "codesign --verify --deep" on the .app says: /Applications/Install macOS High ...
1
vote
1answer
1k views

Code sign on Ubuntu Server

I have a service, where an app is generated from a jar file, using Jar2App, on the fly. I use an Ubuntu Linux server as host for the service and I need to sign the app, after it is generated. How ...
17
votes
1answer
9k views

What are the restrictions of ad-hoc code signing?

It is possible to sign code or apps "ad-hoc" using codesign. The man page tells us the following about ad-hoc code signing: If identity is the single letter "-" (dash), ad-hoc signing is performed. ...
2
votes
1answer
250 views

Why is my codesigned app still quarantined by macOS?

I have a .app that is quarantined. But I am super confused - how can my .app be properly codesigned and yet still be quarantined by Apple? I have an app called iTest.app that I downloaded from my ...
10
votes
1answer
2k views

App can not be opened because it is from an unidentified developer

Question: Please note before reading this that: "Tell them to go to System preferences > Security & privacy and allow 3rd party applications to run. Is not an acceptable solve for this issue. ...
30
votes
2answers
82k views

"XXX can't be opened. You should move it to trash." for flash projector applications on mac os sierra

We are experiencing a problem with flash projector .app executables that we build. When the app is downloaded from the internet on OSX sierra the message "XXX can't be opened. You should move it to ...
3
votes
1answer
13k views

"The installation failed. The installer could not install the software because there was no software found to install."

I'm getting this error on my mid '11 Mac Mini (running OS X El Capitan 10.11.6) when I'm trying to install an audio plug-in by Presonus, the demo of OrangeVocoder 10th Anniversary Edition. The ...
1
vote
1answer
66 views

Mac app shrinks when copied to USB

I have a Mac app that is 443,245,675 bytes. When I copy it to a flash drive, the copied version is only 443,239,527 bytes and the app package becomes invalid (spctl -a fails). This difference (6148 ...
0
votes
1answer
550 views

How do I extract X.509 certificates embedded in executables?

This should be very simple, but I am unable to find a straightforward answer to this question. I have a few Mach-O binaries that have certificates embedded in them. Some of these might not be ...
0
votes
1answer
1k views

Signed binary being warned as signed by unknown developer on OSx

I have a binary file. I released it to the customer, which is signed by a valid developer certificate. When customer is downloading that binary and trying to execute it (customer has a standard user ...
1
vote
1answer
4k views

XCode: code signing entitlement file in command line

I would like to be able to build an IPA file with a given Entilements.plist file using command line. I can do pretty much anything, but I do not find a way to pass a code signing entitlements file ...
0
votes
1answer
632 views

Signed but still can't open

A colleague of mine signed an application we're working on. Trying to open it from finder, I get an error message “‹Name›” can’t be opened because it is from an unidentified developer (or the ...