Post

Replies

Boosts

Views

Activity

Notarization failing "The signature of the binary is invalid."
I have been successfully notarizing my app until a few days ago, when I started getting the error "The signature of the binary is invalid." I have run the validation: codesign -vvv --deep --strict /path/to/MyApp.app The log says the app file is "valid on disk" and "satisfies its Designated Requirement". I have updated XCode and rebooted, to no avail. My developer account is paid up to date. I also run pkgutil --check-signature /path/to/MyPackage.pkg, and everything seems OK: Package "MyPackage.pkg":   Status: signed by a developer certificate issued by Apple for distribution   Signed with a trusted timestamp on: 2022-02-06 22:17:34 +0000   Certificate Chain:   1. Developer ID Installer: My Developer. (*****)     Expires: 2025-06-26 17:31:02 +0000     SHA256 Fingerprint:       C7 B1 4F 27 99 AE 1A 96 3C 7C 81 9B 6A 59 91 79 9B B5 C5 93 7A F7        B5 44 22 BB 8F D3 E9 BA 61 3E     ------------------------------------------------------------------------   2. Developer ID Certification Authority     Expires: 2027-02-01 22:12:15 +0000     SHA256 Fingerprint:       7A FC 9D 01 A6 2F 03 A2 DE 96 37 93 6D 4A FE 68 09 0D 2D E1 8D 03        F2 9C 88 CF B0 B1 BA 63 58 7F     ------------------------------------------------------------------------   3. Apple Root CA     Expires: 2035-02-09 21:40:36 +0000     SHA256 Fingerprint:       B0 B1 73 0E CB C7 FF 45 05 14 2C 49 F1 29 5E 6E DA 6B CA ED 7E 2C        68 C5 BE 91 B5 A1 10 01 F0 24 Why has this started happening? I'm using QtCreator, macOS 10.15.
10
0
1.4k
Feb ’22
What files all need to be codesign'ed?
I have recently upgraded to macOS 14 and Xcode 15. I gather codesign --deep no longer works. Do I have to explicitly codesign every file in my .app? There are several hundreds of them. Also, I am able to successfully codesign my executable (MyApp.app/Contents/MacOS/MyExecutable), but when I upload for Notarization, it fails with "The signature of the binary is invalid.", identifying the executable specifically. This used to work fine. Why is it failing now?
4
0
1.2k
Apr ’24