Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [code-signing]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
21 views

Managing APFS snapshots without purchasing developer certificate

I want to manually create, delete, and restored to snapshots on my APFS volumes (external, for data use, so not limited by SIP). I'm using snaputil, but maintaining APFS snapshots require two ...
user avatar
  • 1,743
3 votes
0 answers
69 views

Why can I still modify my Code Signed Electron app?

We developed a macOS app with Electron. We code-signed and notarized it using Electron-Forge, which generated an *.app package, inside a Contents/_CodeSignature/CodeResources file with an entry for ...
user avatar
  • 131
0 votes
0 answers
101 views

Disable / enable amfid on per-application basis

I want to create and manage snapshots on my Data partition, but because I don't have a developer certificate and apple-granted entitlements (like com.apple.developer.vfs.snapshot), I have to either ...
user avatar
  • 1,743
1 vote
0 answers
139 views

errSecInternalComponent when using codesign from within a daemon

I have my own running daemon application that listens to a network port and executes some different commands based on the coming request. All is working fine except when trying to execute the ...
user avatar
0 votes
1 answer
99 views

Where can I find the syntax for macos spctl (gatekeeper) rules?

I'm trying to code-sign an electron app for submission to the "Mac App Store". As expected, it has been a tremendous pain for 101 reasons. However, I have now discovered a ray of light in ...
user avatar
  • 13
1 vote
1 answer
32 views

Does a Code-Signed application require security permissions?

I am contemplating whether to purchase a Personal Apple CodeSign certificate, for 99$/year. I have a medium-sized user base, and an app that is installed multiple times a month by each user. Upon ...
user avatar
0 votes
0 answers
39 views

What is the correct certificate to setup for AppleScript apps?

In the past I haven't been code signing but with the new security features that are in current operating systems I thought I should to prevent user issues. Under Certificates, Identifiers & ...
user avatar
  • 1,006
0 votes
0 answers
26 views

MacOS unsigned application still after for network permission even quarantine is used

I am working on an automated testing project for an application we are developing. Which required to use an unsigned build. I removed the quarantine using xattr -rd com.apple.quarantine /path_to_app. ...
user avatar
  • 101
1 vote
0 answers
40 views

Problem with signing GDB on Big Sur

I am trying to make GNU debugger gdb work on macOS 11.6 Big Sur. You need to sign the binary to make it work. I use instructions from here: https://sourceware.org/gdb/wiki/PermissionsDarwin However, ...
user avatar
0 votes
1 answer
218 views

Application get sigkill on launch

When I launch certain applications, they don't launch. Running them in iTerm gets sigkill. Running them in gdb does not output any debug information. Running them with dtruss does not output any debug ...
user avatar
  • 1,743
1 vote
0 answers
33 views

How to code sign hidden files?

I have a hidden dylib file that is preventing notarization. The LogFileURL indicates the file is not signed and does not have a valid time stamp. I tried to sign the file separately using the path to ...
user avatar
  • 143
21 votes
1 answer
4k views

Why am I able to run my own app without code signing?

I have a little open-source Qt app I wrote and then compiled on my Mac. I ran macdeployqt and copied it to my /Applications folder, and it runs without complaint. Ultimately I plan to sign this app ...
user avatar
  • 333
0 votes
0 answers
59 views

Disabling application signing/integrity protection

I'm using a macOS 10.15 Parallels virtual machine for development purposes. It is very slow (compared to a macOS 10.13 VM), and I spend a couple of hours extracting XCode. Now, when I try to open ...
user avatar
  • 1,743
0 votes
1 answer
155 views

GPG constantly throwing "no such file or directory" when doing operations

So I want to create a GPG so I can use it. I did gpg --gen-key, put in the information but it threw theNo such file or directory error (see below). ❯ gpg --gen-key gpg (GnuPG) 2.3.1; Copyright (C) ...
user avatar
1 vote
2 answers
104 views

Distribute an app directly to customers: MacOS vs. iOS

I have a Developer Program subscription ("Enrolling as an Individual", not as an Organization). With MacOS, it's possible to code-sign / notarize an app, and ship the .dmg / .pkg to ...
user avatar
0 votes
1 answer
83 views

Do I need the Developer Program to sign an app for my own use?

I installed iTerm2 from MacPorts; since it was built from source, it wasn’t notarized. If I want to sign it for my own usage (not distributing any app), do I need to (pay $99 and) join the Developer ...
user avatar
1 vote
1 answer
757 views

inscrutable rules for disallowing binaries on a new Apple Silicon (Big Sur) machine [closed]

EDIT: This problem appears to have been a bug in the Apple code signing mechanism, and has been fixed in the 11.1 Big Sur release candidate. At the moment I write this, you need to enrol in the Apple ...
user avatar
2 votes
0 answers
537 views

Apps downloaded from Mac App Store won't start due to invalid signature

I'm currently trying to resurrect my 2010 MacBook Pro 15" while my 2015 is away for repairs. The latest it can run is macOS 10.13.6. After installing all the latest OS updates and security ...
user avatar
  • 5,561
8 votes
4 answers
4k views

What harm will denying ocsp.apple.com do?

After the recent issue of trustd trying to connect to Apple's overloaded servers, and causing slowdowns to Macs around the world, one discussion page suggested a temporary fix: This command in ...
user avatar
  • 22.7k
1 vote
0 answers
692 views

Codesign states code object is not signed at all

I have noticed this before too on some executable files. Recently, I downloaded cmake and used codesign to check if it's digitally signed but it states, it's not signed at all: % codesign -v /Volumes/...
user avatar
  • 131
2 votes
1 answer
1k views

Fixing: "There are no devices registered in your account" without a Lightning cable Xcode 11.0

Using Xcode, when I try to sign my app, I get an error that says: Failed to create provision profile There are no devices registered in your account on the developer website. Plug in and select a ...
user avatar
1 vote
1 answer
313 views

Handling permissions to run a bash script

I'm sending a bash script as a .command file to a friend. This person is not very tech savvy which is why I'm sending it in the first place, the goal is for the .command file to run through the shell ...
user avatar
  • 145
1 vote
1 answer
104 views

which certificate/identifiers/profilers should be used for python script to be distributed as a pyinstaller build/bundle outside the app store?

My program works as follows In a while loop, it checks for the active window change - AppKit library used from AppKit import NSWorkspace active_window = (NSWorkspace.sharedWorkspace()....
user avatar
3 votes
2 answers
4k views

How to code-sign my python script / package packaged for mac using pyinstaller without using xcode?

I have written a python script and bundled it using the PyInstaller. The executable file inside the dist folder works fine on my Mac. But not on someone else's Mac even if they've set "App Store ...
user avatar
2 votes
1 answer
194 views

Executing bundled shell command in a hardened runtime application

I have written a Java application which I want to distribute in form of a macOS application bundle. The application needs to execute a command line application which is also part of the bundle. The ...
user avatar
0 votes
0 answers
37 views

macOS Server: How to sign enrollment profiles?

I am wondering how to sign enrollment profiles for macOS Server. Ideally, I would like to avoid paying money. In any case, how do you do it?
user avatar
  • 1,082
3 votes
2 answers
2k views

Signed pkg using productbuild --distribute but codesign says "code object is not signed at all"

I am signing my package during distribution using SIGN_IDENTITY_INSTALLER="Developer ID Installer: Pxxxxxxx, LLC (AXXXXXXXXX)" productbuild --distribution final-distribution.xml --package-path /tmp/...
user avatar
3 votes
0 answers
381 views

How to view expiration date of code signing cert?

I know pkgutil --check-signature and codesign -d -vvv but neither of them show the expiration date. Is there a way to view the expiration date of a code signing cert? Say for instance...macOS ...
user avatar
  • 131
1 vote
1 answer
145 views

Need to solve “Can’t be opened because it is from an unidentified developer" by any other way than changes the Security and Privacy settings

We have created one .app application which will place some files under the user location “/Users//Library/” on executing that. Basically, that app is a shell script app in which .app file is created ...
user avatar
29 votes
1 answer
59k views

macOS Catalina: "App is damaged and can't be opened. You should move it to the trash."

Experiencing a problem with several apps after installing macOS Catalina. When the app is downloaded from the internet I get the error: "APP NAME" is damaged and can't be opened. You should move ...
user avatar
2 votes
0 answers
301 views

How to add Sudo Insults with TouchID without disabling SIP

I am following a guide to recompile sudo with insults. However, I felt uncomfortable disabling SIP so I modified it a bit to allow me to use it with SIP enabled. Unfortunately recompiling sudo broke ...
user avatar
1 vote
0 answers
89 views

How can I programmatically (CLI or code) retrieve the certificate used to sign an app bundle?

I'm interested in knowing when the key used to sign one of my macOS applications has changed after an update. How can I get information about which developer certificate was used to sign a given ...
user avatar
  • 123
5 votes
1 answer
26k views

Xcode 10: Failed to create Provisioning Profile - There are no devices registered

When I try to create a profile to build an iOS app by going to Project → General → Signing, and selecting my Team (Personal), I get two errors: Failed to create provisioning profile. There are ...
user avatar
  • 153
2 votes
1 answer
838 views

Bypassing Gatekeeper in macOS Mojave 10.14.5

At least until macOS Mojave 10.14.4, a user could run any application on a Mac, signed or not, by right clicking it in Finder and manually selecting Open. Does this still work for all applications ...
user avatar
  • 111
1 vote
2 answers
1k views

How to create an identity who can be used for signing code from custom certificate?

I want to codesign one of my applications by using my own certificate (not created with Keychain Access). First, I create a v3.ext file: keyUsage = digitalSignature Then, I created my certificate ...
user avatar
  • 143
1 vote
1 answer
715 views

codesign still tries to access other keychains when adding --keychain parameter

we have a automated codesigning setup on our CI/CD infrastructure which is using the codesing command to resign a iOS application with a certificate located in a specific keychain. The codesign script ...
user avatar
0 votes
1 answer
503 views

Is paid Apple Developer Program subscription required to distribute test IPA file?

I am building an Ionic app, and I want to distribute it to a few people in my organization. Ionic Cordova iOS build command runs successfully. Now i need to generate the IPA file to install the app ...
user avatar
  • 43
5 votes
1 answer
930 views

Deploy iOS app on personal devices

I've been working on a small iOS app, intended as a gift to some family members. To my dismay, I'm finding a lot of barriers to attempting to deploy the app. It largely revolves around signing the app ...
user avatar
11 votes
3 answers
4k views

Should I sign open source code myself?

I use macOS 10.14 and came across a problem when I tried to install an open source plugin for Vim that I found on Github. I downloaded the source code and compiled it myself, which worked well, but ...
user avatar
  • 225
7 votes
3 answers
3k views

Xcode saying Network Extension capability is not enabled when it is

I have been having a lot of issues for the last two weeks trying to sign and distribute a 3rd party MacOS app. I am unable to sign an app with Xcode properly because Xcode is saying that I do not have ...
user avatar
  • 121
5 votes
1 answer
2k views

Gatekeeper refuses validly signed application

I am trying to publish a signed application, but when downloading it through internet, gatekeeper complains: Furthermore, the help page says that the app has been tampered with: Which is actually ...
user avatar
2 votes
1 answer
3k views

How to disable codesign check on Logic Pro X plug-ins?

I run Logic Pro X and other software to make music, and some third party plugins make the program crash if they get a: Exception Type: EXC_BAD_ACCESS (Code Signature Invalid) I can solve this ...
user avatar
  • 31
6 votes
2 answers
14k views

Load untrusted kernel extension in macOS Mojave

The Volta application is installed on my MacBook Pro, running macOS 10.14 Mojave. This app needs a kernel extension to function properly, and said extension does not have the proper code signatures. ...
user avatar
  • 2,041
1 vote
1 answer
521 views

Errors running certain apps under macOS 10.14 Mojave Beta 10

Apple Mac Pro (early 2009) 4,1 -> 5,1 Firmware upgraded macOS 10.14 Mojave Beta 10 Tweetbot 3.1 Hello, I upgraded my machine to Mojave Beta 10 yesterday via a somewhat devious route http://...
user avatar
2 votes
1 answer
1k views

3rd Party Mac Developer Application: DEVELOPER NAME: no identity found

I need to sign the code of an app I'm trying to submit to App Store through terminal: codesign -f -s '3rd Party Mac Developer Application: DEVELOPER NAME' --entitlements "APPNAME.entitlements" "/...
user avatar
  • 271
3 votes
0 answers
309 views

High Sierra installer has "sealed resources" v2 but says "resource envelope is obsolete"

Setting up a new laptop... I downloaded the Install macOS High Sierra.app from the app store on an El Capitan machine. "codesign --verify --deep" on the .app says: /Applications/Install macOS High ...
user avatar
  • 131
1 vote
1 answer
1k views

Code sign on Ubuntu Server

I have a service, where an app is generated from a jar file, using Jar2App, on the fly. I use an Ubuntu Linux server as host for the service and I need to sign the app, after it is generated. How ...
user avatar
  • 111
21 votes
1 answer
13k views

What are the restrictions of ad-hoc code signing?

It is possible to sign code or apps "ad-hoc" using codesign. The man page tells us the following about ad-hoc code signing: If identity is the single letter "-" (dash), ad-hoc signing is performed. ...
user avatar
  • 1,534
2 votes
1 answer
308 views

Why is my codesigned app still quarantined by macOS?

I have a .app that is quarantined. But I am super confused - how can my .app be properly codesigned and yet still be quarantined by Apple? I have an app called iTest.app that I downloaded from my ...
user avatar
  • 163
10 votes
1 answer
3k views

App can not be opened because it is from an unidentified developer

Question: Please note before reading this that: "Tell them to go to System preferences > Security & privacy and allow 3rd party applications to run. Is not an acceptable solve for this issue. ...
user avatar
  • 153