We have send email to Apple support but nobody replies, so we send it here to demand help. Our company builds up our desktop application XXXX.app, and it runs well under Mac OS 10.15.4 Catalina. We strictly follow the guideline of Nested code from https://developer.apple.com/library/archive/technotes/tn2206/_index.html Then we buy Apple 99$ program and plan to codesign it to bypass GateKeeper. However, this operation goes into disaster. We run the codesign one by one following your guide, from inside to outside (NOT --deep). sudo codesign --force --timestamp --options=runtime -s "${cert}" file/full/path And check the codesign with $ codesign -vvv --deep --strict XXXX.app XXXX.app: valid on disk XXXX.app: satisfies its Designated Requirement But when we run the signed XXXX.app , it crashes with exception (crashReport.txt). Your codesign makes our app crash! You can repro it again and again. Run well 2. codesign 3. Run up and crash inmediately! Crash stack info is below crashReport2.txt Thread 0 Crashed: 0 QtWebKit 0x00000001121d19ff ***::OSAllocator::reserveAndCommit(unsigned long, ***::OSAllocator::Usage, bool, bool, bool) + 205 1 QtWebKit 0x00000001121d1907 ***::OSAllocator::reserveUncommitted(unsigned long, ***::OSAllocator::Usage, bool, bool, bool) + 15 2 QtWebKit 0x00000001120641c4 ***::PageReservation::reserveWithGuardPages(unsigned long, ***::OSAllocator::Usage, bool, bool) + 56 3 QtWebKit 0x00000001120640f5 JSC::FixedVMPoolExecutableAllocator::FixedVMPoolExecutableAllocator() + 103 4 QtWebKit 0x0000000112063eac JSC::ExecutableAllocator::initializeAllocator() + 28 5 QtWebKit 0x0000000112126376 JSC::initializeThreadingOnce() + 50 6 ??? 0x00007fff6f2637e5 0 + 140735058163685 7 ??? 0x00007fff6f258ec7 0 + 140735058120391 8 ??? 0x00007fff6f263793 0 + 140735058163603 9 QtWebKit 0x000000011179df19 WebCore::ScriptController::initializeThreading() + 9 10 QtWebKit 0x000000011173be49 WebCore::initializeWebCoreQt() + 30 11 QtWebKit 0x00000001117043cf QWebPagePrivate::QWebPagePrivate(QWebPage*) + 213 12 QtWebKit 0x000000011170b80d QWebPage::QWebPage(QObject*) + 55 13 QtWebKit.so 0x00000001116689df Sbk_QWebPage_Init(_object*, _object*, _object*) + 447 14 ??? 0x000000010d328681 0 + 4516382337 15 _tsLib1.so 0x000000010e8fdfbb __Pyx_PyObject_CallNoArg + 186 (_tsLib1.c:429148) From the link below and crash report, we test the entitlements.plist to bypass memory problem, but fail too. https://github.com/pyinstaller/pyinstaller/issues/4629 We use following command line to codesign : sudo codesign --force --timestamp --options=runtime --entitlements ./entitlements.plist -s "${cert}" full/path Then the app evenly do not run up at all. It shows: zsh: killed ./XXXX.app/Contents/MacOS/XXXX We also test other parameter com.apple.security.cs.allow-jit / com.apple.security.cs.disable-library-validation ( others/entitlements_full.plist ) , nothing changed. How can we bypass the codesign and make app runnable? Please help us. Thanks

We codesign our runnable PC application with entitlements.plist as following sudo codesign --force --timestamp --options=runtime --entitlements ./entitlements.plist -s "${cert}" full/path then we run it, the application goes into killed rather than runs up . The terminal shows as below: zsh: killed   ./XXXX.app/Contents/MacOS/XXXX The crash report and entitlements.plist are attached. The Mac OS is 10.15.4 , with latest XCode from Apple AppStore. From the report, it seems terminated due to EXC_CRASH (Code Signature Invalid) . So it just failed for the boot of app. Hope somebody gives us points to move forward. entitlements.plist <?xml version="1.0" encoding="UTF-8" ?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.security.cs.allow-jit</key> <true/> </dict> </plist> errorReport.txt

We have got the Developer ID Application certification from apple official website. But it shows that the certificate is not trusted in the Keychain App. After investigation in this website, and we know that we should install Apple Worldwide Developer Relation Certification Authority (WWDR) G3 from https://www.apple.com/certificateauthority/ We download G3 and install the certificate, and it shows "The certificate is marked as not trusted by all users", as shown in the attachment. Could some expert help us to move on? Thanks!