I notarized the .pkg
xcrun notarytool submit "dist/VIVIDTIME.pkg" \
--apple-id "p.bochkov.rastopchin@icloud.com" \
--password "**************" \
--team-id "2QKDCTR5Y3" \
--wait
Conducting pre-submission checks for VIVIDTIME.pkg and initiating connection to the Apple notary service...
Submission ID received
id: 8c5e3bbf-2938-4ea6-a568-a816a5b0af76
Upload progress: 100,00 % (201 MB of 201 MB)
Successfully uploaded file
id: 8c5e3bbf-2938-4ea6-a568-a816a5b0af76
path: /Users/innrvoice/Documents/GitHub/vividtime-macos/app/electron/dist/VIVIDTIME.pkg
Waiting for processing to complete.
Current status: Accepted................
Processing complete
id: 8c5e3bbf-2938-4ea6-a568-a816a5b0af76
status: Accepted
I checked the notarization
xcrun notarytool log 8c5e3bbf-2938-4ea6-a568-a816a5b0af76 \
--apple-id "p.bochkov.rastopchin@icloud.com" \
--password "****************" \
--team-id "2QKDCTR5Y3"
{
"logFormatVersion": 1,
"jobId": "8c5e3bbf-2938-4ea6-a568-a816a5b0af76",
"status": "Accepted",
"statusSummary": "Ready for distribution",
"statusCode": 0,
"archiveFilename": "VIVIDTIME.pkg",
"uploadDate": "2025-02-18T15:02:34.542Z",
"sha256": "d0b2a066555c49f032540aa3bd87852eb106395b8d685097594daef66f52ee53",
"ticketContents": [
{
"path": "VIVIDTIME.pkg/VIVIDTIME.pkg Contents/Payload/Applications/VIVIDTIME.app/Contents/Frameworks/VIVIDTIME Helper (Plugin).app",
"digestAlgorithm": "SHA-256",
"cdhash": "7d872ce50e0fe4fdbf77910c19a8582f3ec0dc8c",
"arch": "x86_64"
},
... some info skipped...,
{
"path": "VIVIDTIME.pkg",
"digestAlgorithm": "SHA-1",
"cdhash": "e5df4a77845f8a931674280e3b1bfd9e86c6004b"
}
],
"issues": null
}
I try to staple the .pkg
xcrun stapler staple "dist/VIVIDTIME.pkg"
Processing: /Users/innrvoice/Documents/GitHub/vividtime-macos/app/electron/dist/VIVIDTIME.pkg
Could not validate ticket for /Users/innrvoice/Documents/GitHub/vividtime-macos/app/electron/dist/VIVIDTIME.pkg
The staple and validate action failed! Error 65.
Thats it. It is always like this whether I try to create a .dmg or .pkg. I tried rebuilding the app, resigning the .app, attaching the notarization ticket manually. Nothing works.
And more to that. Here is what I see when I try to simulate the Gatekeeper verification:
spctl --assess --type install --verbose=4 dist/VIVIDTIME.pkg
dist/VIVIDTIME.pkg: rejected
source=Unnotarized Developer ID
Could anyone please help me?
