Hi,
I'm responsible for generating the macOS installer for Apache NetBeans. Up until today I've not had any issues, the DMG created has never had any issues being used on others machines.
The process we have signs and notarizes the app, as expected. However when downloading this from the internet at attempting to install the app, users are reporting that it cannot be opened because it cannot be checked by Apple for malicious software.
Heres a link to the app: https://dist.apache.org/repos/dist/dev/netbeans/netbeans-installers/13/Apache-NetBeans-13-bin-macosx.dmg
If I try to open this myself(after downloading), I can see 2 messages in Console:
1:
assessment denied for Apache-NetBeans-13-bin-macosx.dmg
com.apple.message.domain: com.apple.security.assessment.outcome2
com.apple.message.signature2: bundle:UNBUNDLED
com.apple.message.signature: denied:no usable signature
com.apple.message.signature3: Apache-NetBeans-13-bin-macosx.dmg
com.apple.message.signature5: UNKNOWN
com.apple.message.signature4: 3
SenderMachUUID: 8702454A-423C-33A4-BDAA-656186E59614
2:
assessment denied for Apache NetBeans 13.pkg
com.apple.message.domain: com.apple.security.assessment.outcome2
com.apple.message.signature2: bundle:UNBUNDLED
com.apple.message.signature3: Apache NetBeans 13.pkg
com.apple.message.signature5: UNKNOWN
com.apple.message.signature4: 2
com.apple.message.signature: denied:Unnotarized Developer ID
SenderMachUUID: 8702454A-423C-33A4-BDAA-656186E59614
I'm struggling to work out how to further diagnose this, to allow us to release this application? The notarization of this app comes back as "Package Approved", so I don't get that reference in those messages.
Any help or advice on how to continue with this?
Selecting any option will automatically load the page