Post

Replies

Boosts

Views

Activity

Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
Huh - Xcode even says "Provisioning Profile – None Required", for all my embedded tools. I had given some wrong information earlier, though: I get the errors only for the binary-only tools, but not for the embedded faceless BG app. Still, Xcode shows the same info under "Signing & Capabilities" for the binary-only tools and the embedded app bundle, yet the app bundle appears to be accepted by the binary-only tools are not. I can't figure this out.
9h
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
And how do I even add a .provisionprofile to a binary? I know how to embed an Info.plist into a binary tool (using a special section) – do I do the same for the profile? Does a sample project exist that has a binary-only tool embedded so that I can look at how it's supposed to work? There are so many variables here that it's difficult to try all the combinations when I keep just getting the same rough error message every time after an upload. BTW, I also did the "Fix an app built with Xcode".
9h
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
Quinn, I've now read the linked document. The part at the end is a bit confusing to me as it says that the embedded tools only need their own entitlements because of Sandboxing. But since my app isn't sandboxed, do I still need to do that to get the errors fixed? If so, do I need to create a new cert for each sub-bundleID, or can I use the same wildcard cert? And then I need to create a separate .provisionprofile for each tool, even though it uses the same wildcard cert?
9h
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
Quinn, Yes, the app contains both binary-only tools and bundles such as a faceless background app. Each has its own bundle ID, of course, but all derive from the main app's "org.tempel.findanyfile". That's the correct way, isn't it? Does each of these embedded binaries now need their own entitlement file? Or do I need to add something to the main entitlement file, such as listing each of the sub-binaries' bundle IDs? BTW, my app is exempt from sandboxing (legacy MAS).
10h
Comment on ITMS-90885 “${executable}” in bundle “${bundle}” is missing a provisioning profile
I am getting this error now, in late 2026, after switching from building my app with Xcode 13.4 to Xcode 27.1 (only in order to get the new macOS 26ff appearance - while I still need macOS 10.11 support for my bug fix releases). What bothers me most about this error msg is that it still uses placeholders like "${executable}" instead of filling them in. Is this ever getting looked at? Has no one filed a bug report about this in all these years?
2d
Comment on macOS 27 - my faceless bg-only app now appears in the Dock - how to get rid of that?
My bad. I meant to write: "The LoginItems surely isn't it". Content/Library/LoginItems is only used in conjunction with SMAppService. But I need to use it with the classic addition to the old Login Items list in the System Prefs, and for that purpose, when adding it to the app's LoginItems, it has side effects. I don't know the details any more but I had a good reason not to place it there.
Sep ’26
Comment on XCode 13 - No Help Book
I don't think it's sandbox related because my app iClip has the same issue: If the app was launched from within /Applications, the Help isn't found ("The selected content is currently unavailable"), but once I move it into the App folder, even if I rename it, Help comes back. Also, I build my app not with Xcode but with Xojo from 2021, and the Info.plist contains no Xcode or SDK related entries.
Nov ’25
Comment on Not seeing any recent crash reports although there should be some
I suspect it's not a bug that would get fixed but rather a case of bad project configuration, and I just need to learn what the problem is on my end. That's why I now opened a DTS incident and hope it won't get rejected because you asked for a bug report instead. I hope that this allows for a more direct dialog (Radar entries have never led to a dialog but only a reponse "we think this is fixed, please confirm" reply at best).
Apr ’25
Comment on How to detect an auto-mounting directory and wait for it to get mounted?
searchfs takes practically the same time searching for creation dates than it does for file names. searchfs now takes 13-15s on /System/Volumes/Data with about 1.5M files. I suspect the increased speed is due to the faster Mac I'm using now (M4 Mini). But the issue becomes less significant now with faster Macs. I used to wait a minute for a search on a decently full startup volume, and that was standing out quite much vs. the "few" seconds it took on High Sierra with HFS+.
Topic: App & System Services SubTopic: Core OS Tags:
Mar ’25
Comment on How to detect an auto-mounting directory and wait for it to get mounted?
Thank you for adding some more details, Kevin. As it currently seems to me that auto-mounting these sub-volumes on the Windows share is immediate, I'll stay with the method of simply re-reading the once-empty dir if I realize it's a mountpoint. But just in case - do you know if there's a DA callback that'll notify me immediately once the mountpoint gets triggered? I only know DARegisterDiskMountApprovalCallback, and that comes in only after the new volume has been inspected a bit, I believe.
Topic: App & System Services SubTopic: Core OS Tags:
Mar ’25
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
Huh - Xcode even says "Provisioning Profile – None Required", for all my embedded tools. I had given some wrong information earlier, though: I get the errors only for the binary-only tools, but not for the embedded faceless BG app. Still, Xcode shows the same info under "Signing & Capabilities" for the binary-only tools and the embedded app bundle, yet the app bundle appears to be accepted by the binary-only tools are not. I can't figure this out.
Replies
Boosts
Views
Activity
9h
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
And how do I even add a .provisionprofile to a binary? I know how to embed an Info.plist into a binary tool (using a special section) – do I do the same for the profile? Does a sample project exist that has a binary-only tool embedded so that I can look at how it's supposed to work? There are so many variables here that it's difficult to try all the combinations when I keep just getting the same rough error message every time after an upload. BTW, I also did the "Fix an app built with Xcode".
Replies
Boosts
Views
Activity
9h
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
Quinn, I've now read the linked document. The part at the end is a bit confusing to me as it says that the embedded tools only need their own entitlements because of Sandboxing. But since my app isn't sandboxed, do I still need to do that to get the errors fixed? If so, do I need to create a new cert for each sub-bundleID, or can I use the same wildcard cert? And then I need to create a separate .provisionprofile for each tool, even though it uses the same wildcard cert?
Replies
Boosts
Views
Activity
9h
Comment on Cannot upload to App Store Connect due to "ITMS-90288: Invalid Code Signing Entitlements" and ITMS-90885
Quinn, Yes, the app contains both binary-only tools and bundles such as a faceless background app. Each has its own bundle ID, of course, but all derive from the main app's "org.tempel.findanyfile". That's the correct way, isn't it? Does each of these embedded binaries now need their own entitlement file? Or do I need to add something to the main entitlement file, such as listing each of the sub-binaries' bundle IDs? BTW, my app is exempt from sandboxing (legacy MAS).
Replies
Boosts
Views
Activity
10h
Comment on ITMS-90885 “${executable}” in bundle “${bundle}” is missing a provisioning profile
I am getting this error now, in late 2026, after switching from building my app with Xcode 13.4 to Xcode 27.1 (only in order to get the new macOS 26ff appearance - while I still need macOS 10.11 support for my bug fix releases). What bothers me most about this error msg is that it still uses placeholders like "${executable}" instead of filling them in. Is this ever getting looked at? Has no one filed a bug report about this in all these years?
Replies
Boosts
Views
Activity
2d
Comment on macOS 27 - my faceless bg-only app now appears in the Dock - how to get rid of that?
My bad. I meant to write: "The LoginItems surely isn't it". Content/Library/LoginItems is only used in conjunction with SMAppService. But I need to use it with the classic addition to the old Login Items list in the System Prefs, and for that purpose, when adding it to the app's LoginItems, it has side effects. I don't know the details any more but I had a good reason not to place it there.
Replies
Boosts
Views
Activity
Sep ’26
Comment on XCode 13 - No Help Book
I don't think it's sandbox related because my app iClip has the same issue: If the app was launched from within /Applications, the Help isn't found ("The selected content is currently unavailable"), but once I move it into the App folder, even if I rename it, Help comes back. Also, I build my app not with Xcode but with Xojo from 2021, and the Info.plist contains no Xcode or SDK related entries.
Replies
Boosts
Views
Activity
Nov ’25
Comment on Not seeing any recent crash reports although there should be some
I suspect it's not a bug that would get fixed but rather a case of bad project configuration, and I just need to learn what the problem is on my end. That's why I now opened a DTS incident and hope it won't get rejected because you asked for a bug report instead. I hope that this allows for a more direct dialog (Radar entries have never led to a dialog but only a reponse "we think this is fixed, please confirm" reply at best).
Replies
Boosts
Views
Activity
Apr ’25
Comment on How to detect an auto-mounting directory and wait for it to get mounted?
searchfs takes practically the same time searching for creation dates than it does for file names. searchfs now takes 13-15s on /System/Volumes/Data with about 1.5M files. I suspect the increased speed is due to the faster Mac I'm using now (M4 Mini). But the issue becomes less significant now with faster Macs. I used to wait a minute for a search on a decently full startup volume, and that was standing out quite much vs. the "few" seconds it took on High Sierra with HFS+.
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Mar ’25
Comment on How to detect an auto-mounting directory and wait for it to get mounted?
Thank you for adding some more details, Kevin. As it currently seems to me that auto-mounting these sub-volumes on the Windows share is immediate, I'll stay with the method of simply re-reading the once-empty dir if I realize it's a mountpoint. But just in case - do you know if there's a DA callback that'll notify me immediately once the mountpoint gets triggered? I only know DARegisterDiskMountApprovalCallback, and that comes in only after the new volume has been inspected a bit, I believe.
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
Mar ’25