Post

Replies

Boosts

Views

Activity

Reply to Checking DMG notarization. Rejected, but works fine
Quinn, Thanks for your reply and advices! I added codesign for a DMG image. And then spctl shows that DMG is correct: MyApp.dmg: accepted source=Notarized Developer ID It seems that many Mac developers (including me) were not aware that it also necessary to codesign DMG in addition to codesigning of APP bundle and notarization. 2. Probably I found a typo in your article "Testing a Notarised Product". It says: Disk image spctl -a -t open -vvv --context context:primary-signature WaffleVarnish.dmg However this command shows nothing for any correctly notarized app (including my app, Chrome, Audacity, etc). If I add "-v" to your command: spctl -a -t open -vvv --context context:primary-signature WaffleVarnish.dmg -v It shows a result for Chrome: googlechrome.dmg: accepted source=Notarized Developer ID
Topic: Code Signing SubTopic: Notarization Tags:
Mar ’21
Reply to Checking DMG notarization. Rejected, but works fine
Another question. I build a special ZIP with APP bundle for Auto Update feature. This ZIP is being notarized. How I can check that APP bundle is notarized and a difference with only codesigned APP bundle? spctl -a -t exec -vvv MyApp.app always shows the same result for codesigned APP, regardless notarization: MyApp.app/: accepted source=Notarized Developer ID origin=Developer ID Application: COMPANY (RDPXXXXXX)
Topic: Code Signing SubTopic: Notarization Tags:
Mar ’21
Reply to Checking DMG notarization. Rejected, but works fine
Sometimes codesign for a DMG doesn't work correctly: codesign -s "Developer ID Application: COMPANY" --timestamp -i MyApp MyApp.dmg I got an error: "The timestamp service is not available." and DMG was not completely signed. APP bundle was signed correctly (a minute earlier) and notarized (several minutes later). I re-launched the script again and next time DMG was signed rightly.
Topic: Code Signing SubTopic: Notarization Tags:
Mar ’21
Reply to Checking DMG notarization. Rejected, but works fine
Quinn, Thanks for your replies! My workflow is the following: Build my APP Codesign my APP Create a DMG from my APP Notarize DMG... Staple notarization to DMG Create ZIP from APP (from step 1) for Auto-Update Notarize ZIP... Staple notarization to original APP (from step 1) Delete ZIP Create a new ZIP from APP. Is it correct? I've understood about timestamp servers. I tried again a command from your article: spctl -a -t open -vvv --context context:primary-signature googlechrome.dmg and now it works on iMac (Intel) Big Sur 11.2.3. Earlier it didn't work on DTK with Big Sur 11.1.0
Topic: Code Signing SubTopic: Notarization Tags:
Mar ’21
Reply to Pls fix m1 chip issues with external monitor hidpi
I found a solution for QuadHD monitor and M1 Mac and posted on Macrumors forum. Search "Solution. QuadHD monitor with HiDPI and Mac Mini M1" in Google. Briefly, you need to buy 4K HDMI EDID emulator (8 USD), USB-C to DisplayPort or HDMI converter (8-12 USD) and enable Mirror Displays option in macOS. Now you'll see scaled HiDPI resolutions.
Topic: App & System Services SubTopic: Core OS Tags:
Jul ’21
Reply to No way to accept Updated Program License Agreement
I have a similar strange problem. Today I discovered that I cannot longer notarize my macOS app (outside AppStore): "Error: You must first sign the relevant contracts online. (1048)". I tried on 3 Macs, no VPN. I check developer.apple.com > App Store Connect > Agreements, Tax, and Banking. I see updated License Agreement. But I cannot sign it. There is no sign or accept button! Why? I'm a holder and admin of this Apple ID for our small team. I tried in Safari and Chrome.
Jan ’22