Post

Replies

Boosts

Views

Activity

Reply to Ported app to M2 and need advice to notarize
Hi, I have got it so far, that I can load my main shared objects (*.so) within my application bundle within Contents/lib. But I didn't have found any documentation where to locate plugins that I want NOT to be located in the same directory. This is because I scan the directory and use a loose coupled system for my software. My plugins directory was at Contents/Resources/plugins and I was unable to load any of these by the following module name for dlopen. For example ./Contents/Resources/plugins/fooPlugin.so After moving the plugins beside the Contents/lib directory and adopted my path for the parameter to ./Contents/plugins/fooPlugin.so it failed as well. While reading the @rpath install_name_tool, I did not found an example for other than the lib folder . regardless id local/lib ~/lib or whet ever was mentioned. So far, I think, I have gone through the code signing steps with applying entitlements and through notarizing. I think, I miss something around the custom plugin path. Thanks, Lothar
Jul ’24
Reply to Ported app to M2 and need advice to notarize
I got so far over the first loading of a so with dlopen. My main plugin, lbModule.so could be loaded after I have set entitlements. Then I was able to load another module from the lib directory, where lbModule.so is located, but that then does not be able to loaf my real plugins: Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbVisitorOperations.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbBasicEventHandlers.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbFileOperationsPlugin.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbCryptoStream.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbDMFXslt.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbwxUpdateChecker.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbDMFBasicActionSteps.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/UserFeedback.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/DatabaseLayerGateway.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbXSLTTransformer.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbDMFDataModel.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbLoginWizard.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbANTLR3.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbDatabaseReport.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbDynamicAppStorage.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbDatabaseForm.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbwxSFDesigner.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/TestPlugin.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbwxPropertyForm.so' nicht laden. Pid 59583 :lbHook.cpp:992 Kann SO module './wxWrapper.app/Contents/Resources/plugins/lbUILanguage.so' nicht laden. Pid 59583 :2024. 7.28 - 19:27:30 Datei: lbMetaApplication.cpp Zeile: 1363 Message: Error: Could not load stream operator classes! Should I move the plugin folder out of Resources beside the lib folder? Two examples. The first does not load but the second: Executable=/Users/lothar/develop/Projects/lbdmf/Test/GUI/wxWrapper/wxWrapper.app/Contents/Resources/plugins/lbVisitorOperations.so.0.0.1 Identifier=lbVisitorOperations.so.0 Format=Mach-O thin (arm64) CodeDirectory v=20500 size=7716 flags=0x10000(runtime) hashes=232+5 location=embedded Signature size=8978 Timestamp=28. Jul 2024 at 19:26:26 Info.plist=not bound TeamIdentifier=3MPMMGXYRY Runtime Version=14.2.0 Sealed Resources=none Internal requirements count=1 size=184 [Dict] [Key] com.apple.security.cs.disable-library-validation [Value] [Bool] true lothar@macm2 wxWrapper % codesign -d -v --entitlements - wxwrapper.app/Contents/lib/lbModule.so Executable=/Users/lothar/develop/Projects/lbdmf/Test/GUI/wxWrapper/wxWrapper.app/Contents/lib/lbModule.so.0.0.1 Identifier=lbModule.so.0 Format=Mach-O thin (arm64) CodeDirectory v=20500 size=2809 flags=0x10000(runtime) hashes=79+5 location=embedded Signature size=8977 Timestamp=28. Jul 2024 at 19:26:21 Info.plist=not bound TeamIdentifier=3MPMMGXYRY Runtime Version=14.2.0 Sealed Resources=none Internal requirements count=1 size=176 [Dict] [Key] com.apple.security.cs.disable-library-validation [Value] [Bool] true lothar@macm2 wxWrapper % For today, I have tried enough. I should rename the title and the topic. It is no longer notarization. Regards, Lothar
Jul ’24
Reply to Ported app to M2 and need advice to notarize
Here is the second part: Here is the lbModule.so shared object. wxWrapper.app/Contents/lib/lbModule.so: Load command 0 cmd LC_SEGMENT_64 cmdsize 712 segname __TEXT vmaddr 0x0000000000000000 vmsize 0x0000000000034000 fileoff 0 filesize 212992 maxprot 0x00000005 initprot 0x00000005 nsects 8 flags 0x0 Section sectname __text segname __TEXT addr 0x0000000000002634 size 0x000000000002d260 offset 9780 align 2^2 (4) reloff 0 nreloc 0 flags 0x80000400 reserved1 0 reserved2 0 Section sectname __stubs segname __TEXT addr 0x000000000002f894 size 0x0000000000000624 offset 194708 align 2^2 (4) reloff 0 nreloc 0 flags 0x80000408 reserved1 0 (index into indirect symbol table) reserved2 12 (size of stubs) Section sectname __init_offsets segname __TEXT addr 0x000000000002feb8 size 0x000000000000000c offset 196280 align 2^2 (4) reloff 0 nreloc 0 flags 0x00000016 reserved1 0 reserved2 0 Section sectname __gcc_except_tab segname __TEXT addr 0x000000000002fec4 size 0x0000000000000e34 offset 196292 align 2^2 (4) reloff 0 nreloc 0 flags 0x00000000 reserved1 0 reserved2 0 Section sectname __cstring segname __TEXT addr 0x0000000000030cf8 size 0x0000000000002477 offset 199928 align 2^0 (1) reloff 0 nreloc 0 flags 0x00000002 reserved1 0 reserved2 0 Section sectname __const segname __TEXT addr 0x000000000003316f size 0x0000000000000659 offset 209263 align 2^0 (1) reloff 0 nreloc 0 flags 0x00000000 reserved1 0 reserved2 0 Section sectname __unwind_info segname __TEXT addr 0x00000000000337c8 size 0x0000000000000800 offset 210888 align 2^2 (4) reloff 0 nreloc 0 flags 0x00000000 reserved1 0 reserved2 0 Section sectname __eh_frame segname __TEXT addr 0x0000000000033fc8 size 0x0000000000000038 offset 212936 align 2^3 (8) reloff 0 nreloc 0 flags 0x6800000b reserved1 0 reserved2 0 Load command 1 cmd LC_SEGMENT_64 cmdsize 232 segname __DATA_CONST vmaddr 0x0000000000034000 vmsize 0x0000000000004000 fileoff 212992 filesize 16384 maxprot 0x00000003 initprot 0x00000003 nsects 2 flags 0x10 Section sectname __got segname __DATA_CONST addr 0x0000000000034000 size 0x0000000000000438 offset 212992 align 2^3 (8) reloff 0 nreloc 0 flags 0x00000006 reserved1 131 (index into indirect symbol table) reserved2 0 Section sectname __const segname __DATA_CONST addr 0x0000000000034438 size 0x0000000000001368 offset 214072 align 2^3 (8) reloff 0 nreloc 0 flags 0x00000000 reserved1 0 reserved2 0 Load command 2 cmd LC_SEGMENT_64 cmdsize 232 segname __DATA vmaddr 0x0000000000038000 vmsize 0x0000000000004000 fileoff 0 filesize 0 maxprot 0x00000003 initprot 0x00000003 nsects 2 flags 0x0 Section sectname __common segname __DATA addr 0x0000000000038000 size 0x0000000000000030 offset 0 align 2^3 (8) reloff 0 nreloc 0 flags 0x00000001 reserved1 0 reserved2 0 Section sectname __bss segname __DATA addr 0x0000000000038030 size 0x00000000000003e8 offset 0 align 2^0 (1) reloff 0 nreloc 0 flags 0x00000001 reserved1 0 reserved2 0 Load command 3 cmd LC_SEGMENT_64 cmdsize 72 segname __LINKEDIT vmaddr 0x000000000003c000 vmsize 0x000000000001c000 fileoff 229376 filesize 112128 maxprot 0x00000001 initprot 0x00000001 nsects 0 flags 0x0 Load command 4 cmd LC_DYLD_CHAINED_FIXUPS cmdsize 16 dataoff 229376 datasize 4872 Load command 5 cmd LC_DYLD_EXPORTS_TRIE cmdsize 16 dataoff 234248 datasize 10680 Load command 6 cmd LC_SYMTAB cmdsize 24 symoff 245632 nsyms 2941 stroff 293752 strsize 26816 Load command 7 cmd LC_DYSYMTAB cmdsize 80 ilocalsym 0 nlocalsym 2499 iextdefsym 2499 nextdefsym 375 iundefsym 2874 nundefsym 67 tocoff 0 ntoc 0 modtaboff 0 nmodtab 0 extrefsymoff 0 nextrefsyms 0 indirectsymoff 292688 nindirectsyms 266 extreloff 0 nextrel 0 locreloff 0 nlocrel 0 Load command 8 cmd LC_UUID cmdsize 24 uuid 2A4D2901-8DC0-3AD1-969D-A13D19E01AF4 Load command 9 cmd LC_BUILD_VERSION cmdsize 32 platform 1 minos 13.0 sdk 14.2 ntools 1 tool 3 version 1022.1 Load command 10 cmd LC_SOURCE_VERSION cmdsize 16 version 0.0 Load command 11 cmd LC_LOAD_DYLIB cmdsize 96 name @executable_path/../Frameworks/lbHook.framework/Versions/A/lbHook (offset 24) time stamp 2 Thu Jan 1 01:00:02 1970 current version 1.0.0 compatibility version 1.0.0 Load command 12 cmd LC_LOAD_DYLIB cmdsize 48 name /usr/lib/libc++.1.dylib (offset 24) time stamp 2 Thu Jan 1 01:00:02 1970 current version 1600.157.0 compatibility version 1.0.0 Load command 13 cmd LC_LOAD_DYLIB cmdsize 56 name /usr/lib/libSystem.B.dylib (offset 24) time stamp 2 Thu Jan 1 01:00:02 1970 current version 1336.61.1 compatibility version 1.0.0 Load command 14 cmd LC_FUNCTION_STARTS cmdsize 16 dataoff 244928 datasize 704 Load command 15 cmd LC_DATA_IN_CODE cmdsize 16 dataoff 245632 datasize 0 Load command 16 cmd LC_CODE_SIGNATURE cmdsize 16 dataoff 320576 datasize 20928 Hope that gives me an answer. Thanks, Lothar
Jul ’24
Reply to Ported app to M2 and need advice to notarize
I may have found the reason for nt being able to load a library within my application bundle. Are the two libraries starting with /usr/lib/libc++.1.dylib the cause, I cannot load the library? I have added an entitlement to disable com.apple.security.cs.disable-library-validation and added the runtime option --option=library and passed the entitlements file. But the entitlements seem not being reported: lothar@macm2 wxWrapper % codesign -d -v --entitlements - wxwrapper.app Executable=/Users/lothar/develop/Projects/lbdmf/Test/GUI/wxWrapper/wxWrapper.app/Contents/MacOS/wxWrapper Identifier=info.wxwrapper Format=app bundle with Mach-O thin (arm64) CodeDirectory v=20500 size=3002 flags=0x10000(runtime) hashes=87+3 location=embedded Signature size=8977 Timestamp=28. Jul 2024 at 18:02:20 Info.plist entries=14 TeamIdentifier=3MPMMGXYRY Runtime Version=14.2.0 Sealed Resources version=2 rules=13 files=640 Internal requirements count=1 size=176 lothar@macm2 wxWrapper % codesign -d -v --entitlements - wxwrapper.app/Contents/lib/lbModule.so Executable=/Users/lothar/develop/Projects/lbdmf/Test/GUI/wxWrapper/wxWrapper.app/Contents/lib/lbModule.so.0.0.1 Identifier=lbModule.so.0 Format=Mach-O thin (arm64) CodeDirectory v=20500 size=2713 flags=0x10000(runtime) hashes=79+2 location=embedded Signature size=8977 Timestamp=28. Jul 2024 at 18:02:14 Info.plist=not bound TeamIdentifier=3MPMMGXYRY Runtime Version=14.2.0 Sealed Resources=none Internal requirements count=1 size=176 Ill post the second analysis in another answer... Any further ideas? Thanks, Lothar
Jul ’24
Reply to Ported app to M2 and need advice to notarize
I have it got far beyond the notarization! I always ask and then I Digg deeper. I had missed using the correct Developer ID Application certificate. Issuing that with a CSR and addressing that as my signing certificate got me to a next error, I was able to solve by the mentioned option. Hardening runtime was not enabled. Now I can notarize my app and staple it. Now I have some library loading issues, I have due to the hardening enabled. I may miss some dependencies no longer loadable and will investigate into that.
Jul ’24