Notarize problem

Uploading package to notarization service....2021-05-19 15:22:16.163 altool[2746:1769840] CFURLRequestSetHTTPCookieStorageAcceptPolicy_block_invoke: no longer implemented and should not be called

2021-05-19 15:22:17.261 altool[2746:1769831] * Error: Unable to notarize app.

2021-05-19 15:22:17.261 altool[2746:1769831]
* Error: code -1011 (Failed to authenticate for session: (

    "Error Domain=ITunesConnectionAuthenticationErrorDomain Code=-22938 \"Sign in with the app-specific password you generated. If you forgot the app-specific password or need to create a new one, go to appleid.apple.com\" UserInfo={NSLocalizedRecoverySuggestion=Sign in with the app-specific password you generated. If you forgot the app-specific password or need to create a new one, go to appleid.apple.com, NSLocalizedDescription=Sign in with the app-specific password you generated. If you forgot the app-specific password or need to create a new one, go to appleid.apple.com, NSLocalizedFailureReason=App Store operation failed.}"

) Unable to upload your app for notarization.)

Upload failed, please review the error log printed above

Not clear, what went wrong , in this process

Replies

This seems like a straightforward authorisation error. The best way to debug such problems is to use the --list-providers command in altool. That command doesn’t require any inputs (other than your credentials, of course) and thus, if it fails, you know that you have a credentials problem.

So, run this command:

Code Block
% xcrun altool --list-providers CCC


replacing CCC with your credentials. Does that work?

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"
In case I need in the future, what is the exact format of credentials here ?

what is the exact format of credentials here?

It varies depends on how you choose to authenticate. The three most common options are:
  • App-specific password on the command line (A)

  • App-specific password in the keychain (B)

  • API key (C)

Customizing the Notarization Workflow covers option B. Option A is a simplification of that process, where you replace --password "@keychain:AC_PASSWORD" with --password "PPP", where PPP is the app-specific password itself.

WARNING Passing passwords on the command line like this is considered poor form security-wise. It is, however, super useful when debugging. And once you get everything sorted out you can revoke that app-specific password and create a new one for your long-term use.

For info on option C, run altool with the -h option. Create the API key using the instructions in Creating API Keys for App Store Connect API.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"