Hello, I'm trying to notarize my app so it can be opened without having to change the security settings.After signing all the executables with the following command (hardened runtime enabled):$ codesign --deep --force --verbose=2 --sign "Developer ID Application: My Name" --options runtime path/to/executableAnd then checking the signature:$ codesign --verify --deep --strict --verbose=2 MyApp.app
MyApp.app: valid on disk
MyApp.app: satisfies its Designated RequirementWhen I launch the application I have the following error:Exception Type: EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: DYLD, [0x5] Code Signature
Application Specific Information:
dyld: launch, loading dependent libraries, ignoring DYLD_* env vars
Dyld Error Message:
Library not loaded: @rpath/liblua.dylib
Referenced from: /Users/USER/*/MyApp.app/Contents/MyApp/bin/lua
Reason: no suitable image found. Did find:
/Users/USER/*/MyApp.app/Contents/MyApp/bin/lua.app/Contents/MacOS/../../../liblua.dylib: code signature in (/Users/USER/*/MyApp.app/Contents/MyApp/bin/lua.app/Contents/MacOS/../../../liblua.dylib) not valid for use in process using Library Validation: mapped file has no cdhash, completely unsigned? Code has to be at least ad-hoc signed.Searching over the forum I've found that a solution could be to enable some entitlements, so I've enabled all of them and signed the application again, but the problem remains.Any ideas?
Post
Replies
Boosts
Views
Activity
I'm notarizing my .pkg installer and even stapling the ticket after, but I still get rejected after checking it with the following command:spctl -vvv --assess --type install path/to/my/notarized.pkg
path/to/my/notarized.pkg: rejected
origin=3rd Party Mac Developer Installer: My Certificate Name (XXXXXXXXX)My pkg is being created with the "packages" app and then signed using pkgutils. Then it's notarized and after the success response from Apple I'm stapling the ticket into it. The pkg contains an app that is also signed of course.How can I find more information about what's going on? Is there a log somewhere?Thanks in advance.