I am trying to notarize a framework built for both platforms, arm64 and x8664 (universal).
The framework contains a static library (fat file) which can't be notarized.
I get the following errors in the log: "The binary is not signed." and "The signature does not include a secure timestamp."
When I build only for one of the two architectures (non-fat file), the notarization works without any issues.
Universal:
% file libtbarcode11.a
libtbarcode11.a: Mach-O universal binary with 2 architectures: [x8664:current ar archive] [arm64]
libtbarcode11.a (for architecture x8664): current ar archive
libtbarcode11.a (for architecture arm64): current ar archive % lipo -info libtbarcode11.a
Architectures in the fat file: libtbarcode11.a are: x8664 arm64
% codesign -v --verify libtbarcode11.a
libtbarcode11.a: valid on disk
libtbarcode11.a: satisfies its Designated Requirement arm64:
% file libtbarcode11.a
libtbarcode11.a: current ar archive % lipo -info libtbarcode11.a
Non-fat file: libtbarcode11.a is architecture: arm64 % codesign -v --verify libtbarcode11.a
libtbarcode11.a: valid on disk
libtbarcode11.a: satisfies its Designated Requirement
codesign commands I tried so far:
codesign --force --verify --verbose --sign "MyDeveloperIDApplicationCert" libtbarcode11.a
codesign --force --verify --verbose --sign "MyDeveloperIDApplicationCert" --options runtime libtbarcode11.a
codesign --force --verify --verbose --sign "MyDeveloperIDApplicationCert" --deep libtbarcode11.a