Questions tagged [code-signing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
2answers
18 views

Signed pkg using productbuild --distribute but codesign says “code object is not signed at all”

I am signing my package during distribution using SIGN_IDENTITY_INSTALLER="Developer ID Installer: Pxxxxxxx, LLC (AXXXXXXXXX)" productbuild --distribution final-distribution.xml --package-path /tmp/...
1
vote
0answers
23 views

How to view expiration date of code signing cert?

I know pkgutil --check-signature and codesign -d -vvv but neither of them show the expiration date. Is there a way to view the expiration date of a code signing cert? Say for instance...macOS ...
1
vote
1answer
36 views

Need to solve “Can’t be opened because it is from an unidentified developer" by any other way than changes the Security and Privacy settings

We have created one .app application which will place some files under the user location “/Users//Library/” on executing that. Basically, that app is a shell script app in which .app file is created ...
3
votes
1answer
5k views

macOS Catalina: “App is damaged and can't be opened. You should move it to the trash.”

Experiencing a problem with several apps after installing macOS Catalina. When the app is downloaded from the internet I get the error: "APP NAME" is damaged and can't be opened. You should move ...
0
votes
0answers
69 views

How to add Sudo Insults with TouchID without disabling SIP

I am following a guide to recompile sudo with insults. However, I felt uncomfortable disabling SIP so I modified it a bit to allow me to use it with SIP enabled. Unfortunately recompiling sudo broke ...
1
vote
0answers
38 views

How can I programmatically (CLI or code) retrieve the certificate used to sign an app bundle?

I'm interested in knowing when the key used to sign one of my macOS applications has changed after an update. How can I get information about which developer certificate was used to sign a given ...
0
votes
1answer
3k views

Xcode 10: Failed to create Provisioning Profile - There are no devices registered

When I try to create a profile to build an iOS app by going to Project → General → Signing, and selecting my Team (Personal), I get two errors: Failed to create provisioning profile. There are ...
2
votes
1answer
635 views

Bypassing Gatekeeper in macOS Mojave 10.14.5

At least until macOS Mojave 10.14.4, a user could run any application on a Mac, signed or not, by right clicking it in Finder and manually selecting Open. Does this still work for all applications ...
1
vote
2answers
277 views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
0
votes
0answers
571 views

Sideloading: 'Failed to verify code signature of /…'

I am unable to sideload, and am getting this error: Failed to verify code signature of /private/var/installd/Library/Caches/com.apple.mobile.installd.staging/... This error is similar to the one I ...
1
vote
1answer
269 views

codesign still tries to access other keychains when adding --keychain parameter

we have a automated codesigning setup on our CI/CD infrastructure which is using the codesing command to resign a iOS application with a certificate located in a specific keychain. The codesign script ...
1
vote
0answers
134 views

Xcode developer account stopped building. Error in Provisioning profile

I have an Xcode developer account (a free one where I can create an app and test it on my iPhone). Not distribution one. I went to the "Capabilities" tab and turned on the "Keychain Sharing" and "...
0
votes
1answer
327 views

Is paid Apple Developer Program subscription required to distribute test IPA file?

I am building an Ionic app, and I want to distribute it to a few people in my organization. Ionic Cordova iOS build command runs successfully. Now i need to generate the IPA file to install the app ...
0
votes
0answers
99 views

“Error: 0xFFFEFA0A -67062 code object is not signed at all” when trying to launch docker-machine by LaunchDaemon

I am trying to get Docker installed on macOS High Sierra. I've installed Docker via brew, I can start the docker-machine when logged in as root (sudo -i -u root). But when I use LaunchDaemon the ...
4
votes
1answer
517 views

Deploy iOS app on personal devices

I've been working on a small iOS app, intended as a gift to some family members. To my dismay, I'm finding a lot of barriers to attempting to deploy the app. It largely revolves around signing the app ...
11
votes
3answers
3k views

Should I sign open source code myself?

I use macOS 10.14 and came across a problem when I tried to install an open source plugin for Vim that I found on Github. I downloaded the source code and compiled it myself, which worked well, but ...
5
votes
3answers
858 views

Xcode saying Network Extension capability is not enabled when it is

I have been having a lot of issues for the last two weeks trying to sign and distribute a 3rd party MacOS app. I am unable to sign an app with Xcode properly because Xcode is saying that I do not have ...
5
votes
1answer
918 views

Gatekeeper refuses validly signed application

I am trying to publish a signed application, but when downloading it through internet, gatekeeper complains: Furthermore, the help page says that the app has been tampered with: Which is actually ...
2
votes
1answer
650 views

How to disable codesign check on Logic Pro X plug-ins?

I run Logic Pro X and other software to make music, and some third party plugins make the program crash if they get a: Exception Type: EXC_BAD_ACCESS (Code Signature Invalid) I can solve this ...
5
votes
2answers
8k views

Load untrusted kernel extension in macOS Mojave

The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave. This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
1
vote
1answer
471 views

Errors running certain apps under macOS 10.14 Mojave Beta 10

Apple Mac Pro (early 2009) 4,1 -> 5,1 Firmware upgraded macOS 10.14 Mojave Beta 10 Tweetbot 3.1 Hello, I upgraded my machine to Mojave Beta 10 yesterday via a somewhat devious route http://...
2
votes
1answer
783 views

3rd Party Mac Developer Application: DEVELOPER NAME: no identity found

I need to sign the code of an app I'm trying to submit to App Store through terminal: codesign -f -s '3rd Party Mac Developer Application: DEVELOPER NAME' --entitlements "APPNAME.entitlements" "/...
3
votes
0answers
227 views

High Sierra installer has “sealed resources” v2 but says “resource envelope is obsolete”

Setting up a new laptop... I downloaded the Install macOS High Sierra.app from the app store on an El Capitan machine. "codesign --verify --deep" on the .app says: /Applications/Install macOS High ...
1
vote
1answer
763 views

Code sign on Ubuntu Server

I have a service, where an app is generated from a jar file, using Jar2App, on the fly. I use an Ubuntu Linux server as host for the service and I need to sign the app, after it is generated. How ...
12
votes
1answer
5k views

What are the restrictions of ad-hoc code signing?

It is possible to sign code or apps "ad-hoc" using codesign. The man page tells us the following about ad-hoc code signing: If identity is the single letter "-" (dash), ad-hoc signing is performed. ...
2
votes
1answer
163 views

Why is my codesigned app still quarantined by macOS?

I have a .app that is quarantined. But I am super confused - how can my .app be properly codesigned and yet still be quarantined by Apple? I have an app called iTest.app that I downloaded from my ...
9
votes
1answer
1k views

App can not be opened because it is from an unidentified developer

Question: Please note before reading this that: "Tell them to go to System preferences > Security & privacy and allow 3rd party applications to run. Is not an acceptable solve for this issue. ...
25
votes
2answers
66k views

“XXX can't be opened. You should move it to trash.” for flash projector applications on mac os sierra

We are experiencing a problem with flash projector .app executables that we build. When the app is downloaded from the internet on OSX sierra the message "XXX can't be opened. You should move it to ...
3
votes
1answer
10k views

“The installation failed. The installer could not install the software because there was no software found to install.”

I'm getting this error on my mid '11 Mac Mini (running OS X El Capitan 10.11.6) when I'm trying to install an audio plug-in by Presonus, the demo of OrangeVocoder 10th Anniversary Edition. The ...
1
vote
1answer
65 views

Mac app shrinks when copied to USB

I have a Mac app that is 443,245,675 bytes. When I copy it to a flash drive, the copied version is only 443,239,527 bytes and the app package becomes invalid (spctl -a fails). This difference (6148 ...
0
votes
1answer
372 views

How do I extract X.509 certificates embedded in executables?

This should be very simple, but I am unable to find a straightforward answer to this question. I have a few Mach-O binaries that have certificates embedded in them. Some of these might not be ...
0
votes
1answer
588 views

Signed binary being warned as signed by unknown developer on OSx

I have a binary file. I released it to the customer, which is signed by a valid developer certificate. When customer is downloading that binary and trying to execute it (customer has a standard user ...
1
vote
1answer
3k views

XCode: code signing entitlement file in command line

I would like to be able to build an IPA file with a given Entilements.plist file using command line. I can do pretty much anything, but I do not find a way to pass a code signing entitlements file ...
0
votes
1answer
446 views

Signed but still can't open

A colleague of mine signed an application we're working on. Trying to open it from finder, I get an error message “‹Name›” can’t be opened because it is from an unidentified developer (or the ...
3
votes
2answers
9k views

macOS Sierra GDB not codesigned

First I should note that I'm using macOS Sierra (version 10.12 beta 16A238m), but I don't think it's that different than El Capitan in this certain situation (but I guess you know more than I do about ...
21
votes
2answers
2k views

Forcing `open` command to open unsigned app?

I've got my Security preferences set to allow apps downloaded from "Mac App Store and identified developers." When I try to open an unsigned app: open xyz.app I see the following: Usually, I right-...
1
vote
2answers
77 views

Mac/PC: How to change the developer of an Apple Disk Image?

I am trying to use a GD-0912-U Intuos Graphics Tablet in OS X El Capitan‎ at a public hackerspace. They will let me install any programs on the iMac, barring that Gatekeeper believes it is from a ...
1
vote
1answer
270 views

Is there a truly user friendly guide on how to handle iOS Certificates and Provisioning Profiles? – Xcode 7.3 / iOS 9.3

I'm getting a warning that The provisioning profile "iOSTeam Provisioning Profile: *" is expiring soon. I'm not sure what to do and the Apple documentation, even the Quick Start Guide, is overwhelming ...
1
vote
1answer
643 views

Does My Company Need To Code Sign with Two Digital Certificates? Apple Developer and EV Certificate?

My employer plans to distribute Mac OSX software outside the App Store through their website. Do I need to get an organizational developer ID from Apple ($99 USD/yr) plus purchase an EV code-signing ...
1
vote
1answer
1k views

Code Signing: Where is the “encrypted hash” of a signed blob?

Reading the developer docu about Code Signing, it says in section Digital Signatures and Signed Code: To create a digital signature, the signing software computes a special type of checksum ...
3
votes
1answer
4k views

How to compile an app on Xcode without developer account

as you know from Xcode 7 and onwards it's possible to compile an app for your device. Yesterday I tried to compile Kodi on Xcode 7. It says it's possible to compile with Xcode 7 without any ...
1
vote
2answers
492 views

OS X firewall code-signing not working for nginx etc

I am trying to connect to a web server (nginx) on OS X El Capitan - on local wifi from an iOS device. I know from earlier that this is not easy. Tried this without success. Have you come across ...
2
votes
1answer
1k views

Mac App Store Upload Fail: Validation Error (SFML)

I'm working on a SFML App in Xcode 7.2, and I'm trying to upload my project build to the Mac App Store, and I'm getting the following error: An error occurred during validation Couldn't find ...
0
votes
1answer
667 views

Freetype Code Signing Error (Xcode 7.1) App Upload Issue

I'm wondering if anyone can fix my problem? I'm trying to upload a project to the App Store. I'm using Xcode 7.1. I'm getting the following error related to code-signing freetype. CodeSign /Users/me/...
3
votes
1answer
606 views

Signing an App that includes Java fails

I try to sign an app-bundle that includes the Java Runtime Environment 8 (JRE). From command line I run this command: codesign -s "Developer ID Application: My Company" /Development/MyApp.app I get ...
4
votes
1answer
459 views

Mac App Store apps damaged? [duplicate]

Overnight, TextWrangler crashed with a message "TextWrangler" is damaged and can't be opened. I deleted "TextWrangler" and download it again from the App Store. I couldn't update from the Mac App ...
5
votes
4answers
3k views

Codesign dialog does not allow “accept”

Whenever I run codesign from the command line (or a pre-existing script tries to run it) – e.g. by running codesign -s "Local Developer" foo the following dialog appears. Clicking 'Deny' cancels it ...
1
vote
1answer
937 views

Will removing developer devices break apps with old UDIDs on Provisioning profiles?

I have come to the beginning of a new year on my developer license with Apple. At this time I am able to remove old devices from the account: Unfortunately there are several applications that are ...
7
votes
4answers
14k views

How can I tell which Apple ID has signed/purchased specific apps on iOS?

I have an iPhone I'm trying to restore and the restore keeps failing. Specifically, I'm asked to enter the password for family members. I must decline that for secret reasons. Also, family sharing ...
3
votes
2answers
650 views

If I sign a JAR with a certificate from Comodo, will I still get warnings?

I have written a piece of software in Java that I would like to sell, however it is currently unsigned. When I first wrote the software it didn't matter too much, but I think OS X has upgraded since ...