codesign --verify is OK, but spctl --assess gives "a sealed resource is missing or invalid"

Question

Hi,

I am codesigning my macOS app from terminal (after adding some resources I don't want to copy using Xcode build phases). When I verify the signature using "codesign --verify", this is OK, but when I run "spctl --assess", I get "a sealed resource is missing or invalid".

How can I know which resource is missing or invalid? What does spctl checks that codesign don't?

Thanks

7.3k

Posted by

tartiflette74

Reply

Add a Comment

Answer 1

I found the issue: one of the agent processes bundled inside my .app was incorrectly signed; using codesign --verify --deep --verbose allowed me to find this.

Posted by

tartiflette74

Add a Comment

Answer 2

I found the issue: one of the agent processes bundled inside my .app was incorrectly signed; using codesign --verify --deep --verbose allowed me to find this.

Posted by

tartiflette74

Add a Comment

codesign --verify is OK, but spctl --assess gives "a sealed resource is missing or invalid"

Accepted Reply

Replies