It seems that the Swift's dylib files in Contents/Frameworks/ are triggering the issue. If I remove all Swift code so there is no longer a Frameworks folder in the product, the Gatekeeper allows the code to run.How to properly codesign and notarize a product containing the Swift's dylib files?
Post
Replies
Boosts
Views
Activity
I'll check. Any ideas from the log messages what might be the cause and how to address it?
Hi,I've found these two sets of messages in Console which sounds relevant. I've get no hit when search for parts of them over the web.syspolicyd MacOS error: 3syspolicyd Error checking with notarization daemon: 3syspolicyd Error Domain=GatekeeperPolicyScanError Code=-67018 "Code did not match any currently allowed policy" UserInfo={NSURL=<private>, NSLocalizedDescription=Code did not match any currently allowed policy}syspolicyd MacOS error: 3syspolicyd Error checking with notarization daemon: 3syspolicyd rule 13 applies - allow=0I've trierd to find a way how to enable showing private info in logs but the page has no word nor link stating how to actually use it (moreover it states that System has a Enable-Private-Data property but when I show the System specific documentation it's not there). Based on this and this sounds like the option is no longer available to set on 10.15 and no workaround nor no substitute is known. Thanks.
Hi,heh, so you are reusing the same word "package" for different purposis even when their cotext is overlapping, right? It's even a "package" (a directory looking like a file) or a package (*.pkg).Am I understand correctly, that the plug-in package (directory) is considered as a (generic) bundle? So spctl is of no help?It seems that the codesign's --check-notarization argument is not available on 10.14 I'm running.I've copied the (signed and notarized) files to a virtualized 10.15 and got the following:./<pluginpath>: valid on disk./<pluginpath>: satisfies its Designated Requirement./<pluginpath>: explicit requirement satisfiedDoes that mean its correctly code-signed and notarized or not? I'm not sure.What does the "noratized" value in the R argument mean? I've checked man pages but they was of no help (it neither lists possible values nor it hints where to find and learn them).I have uploaded the zip sent to the notarization service to web and downloaded it on 10.15 via Safari to the folder the host app expects plug-ins. I started the third-party host app I got an error when the host app tries to load the plug-in:“<pluginpath>” can’t be opened because Apple cannot check it for malicious software.This software needs to be updated. Contact the developer for more information.What does that exactly mean? I've tried (?) button but it gives "The selected content is currently unavailable." in macOS User Guid window. I expect the wording is supposed for generic user, its not designed to be helpful to the developer.Why macOS complains? I've tried to get it code signed and notarized but it still complains. Have I missed anything?Thanks.
As some parts where removed by the forum engine, I am provided the result of the certificate results again:Authority=Developer ID Application: <Team Name> (<Team Id>)Timestamp=<Date and Time>