From kde-devel Thu Oct 22 17:15:19 2020 From: Jeremy Whiting Date: Thu, 22 Oct 2020 17:15:19 +0000 To: kde-devel Subject: Re: MacOS signing issue. Message-Id: X-MARC-Message: https://marc.info/?l=kde-devel&m=160338697710721 MIME-Version: 1 Content-Type: multipart/mixed; boundary="--00000000000065129e05b2459c1a" --00000000000065129e05b2459c1a Content-Type: text/plain; charset="UTF-8" Notarizing and signing are actually separate things on MacOS, signing the app or checking the signature of the dmg are orthogonal to the issue described and the popup in that report. Notarization is sending the app (zipped) to apple's notarization service so they can check it doesn't use any apis that it shouldn't or something, then the .app needs to be "stapled" with the notarization before putting it into the dmg. That said iirc signing the app is a requirement before submitting the app to apple's notarization service in the first place. On Thu, Oct 22, 2020 at 11:12 AM Ben Cooksley wrote: > On Fri, Oct 23, 2020 at 6:08 AM Michael Reeves > wrote: > >> Could someone familiar with the CI and OS X signing machinism look at >> this. >> >> https://bugs.kde.org/show_bug.cgi?id=428062 >> >> I have no way to test or fix this issue. Which as far as I know is an >> issue with the CI on binary factory. >> > > This is because Craft to my knowledge at this time does not support > notarization of MacOS binaries. > > Once that has been added, the issue should disappear. > > Regards, > Ben > --00000000000065129e05b2459c1a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Notarizing and signing are actually separate things on MacOS, signing th= e app or checking the signature of the dmg are orthogonal to the issue desc= ribed and the popup in that report. Notarization is sending the app (zipped= ) to apple's notarization service so they can check it doesn't use = any apis that it shouldn't or something, then the .app needs to be &quo= t;stapled" with the notarization before putting it into the dmg. That = said iirc signing the app is a requirement before submitting the app to app= le's notarization service in the first place.

On Thu, Oct 22, 2020= at 11:12 AM Ben Cooksley <bcooksle= y@kde.org> wrote:
On Fri, Oct 23, 2020 at 6:08 A= M Michael Reeves <reeves.87@gmail.com> wrote:
<= blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l= eft:1px solid rgb(204,204,204);padding-left:1ex">
Could so= meone familiar with the CI and OS X signing machinism look at this.


I have no wa= y to test or fix this issue. Which as far as I know is an issue with the CI= on binary factory.

This = is because Craft to my knowledge at this time does not support notarization= of MacOS binaries.

Once that has been added, the = issue should disappear.

Regards,
Ben=C2= =A0
--00000000000065129e05b2459c1a--