4 Replies
      Latest reply on Jul 17, 2019 2:17 AM by cenkingunlugu
      DEADBEEF Level 1 Level 1 (0 points)

        Hi,

         

        I try to notarized my application, from Xcode I do an archive, choose "Distribute app", upload it to be notarized and get a successful message.

        When I export the notarized application I also attach the ticket to validate it using:

         

        xcrun stapler staple -v "myApp.app"

         

        Everything seems to works perfectly since  when I run the following command:

         

        spctl -a -v myApp.app

         

        I have this output

         

        myApp.app: accepted
        source=Notarized Developer ID

         

        However, when I put it on a server and I tried to download, I cannot launch it but I get the Gatekeeper pop telling me that

         

        "myApp" can’t be opened because the identity of the developer cannot be confirmed.

         

        What's wrong? I don't understand since the application is notarized...

        Any idea?

         

        Thanks

        • Re: Notarized app but quarantine
          eskimo Apple Staff Apple Staff (11,625 points)

          What does spctl think about the downloaded version of your app?

          Share and Enjoy

          Quinn “The Eskimo!”
          Apple Developer Relations, Developer Technical Support, Core OS/Hardware
          let myEmail = "eskimo" + "1" + "@apple.com"

            • Re: Notarized app but quarantine
              DEADBEEF Level 1 Level 1 (0 points)

              Thank you for helping me.

               

              I tried on different macOS version.

               

              When I download it on macOS 10.14 Mojave and run

               

              spctl -a -v myApp.app

               

              I have:

               

              myApp.app: accepted
              source=Notarized Developer ID

               

              And manage to launch it.

               

              However on macOS 10.12 doing the same give me the following message

               

              myApp.app: accepted
              source=Developer ID

               

              (From what I understood, the source=Developer ID is normal in macOS 10.13 and earlier) but when I launch the app I have the following message in gatekeeper popup:

               

              “myApp” can’t be opened because the identity of the developer cannot be confirmed. Your security preferences allow installation of only apps from the App Store and identified developers.

                • Re: Notarized app but quarantine
                  eskimo Apple Staff Apple Staff (11,625 points)

                  Notarisation is new in 10.14, so 10.12 is definitely not going to say Notarized Developer ID.  However, I would expect that it still accept it as a standard Developer ID, which is what spctl is telling you here.

                  As to why your getting an error on launch on 10.12, that’s less clear.  If you sign your app without notarisation — that is, as an old school Developer ID app — what happens on 10.12? [1]

                  Share and Enjoy

                  Quinn “The Eskimo!”
                  Apple Developer Relations, Developer Technical Support, Core OS/Hardware
                  let myEmail = "eskimo" + "1" + "@apple.com"

                  [1] I’m not suggesting that you ship this way; this is just a diagnostic test.

              • Re: Notarized app but quarantine
                cenkingunlugu Level 1 Level 1 (0 points)

                Could you find a solution? I am also having exact same problem.