Comments (2)
As I just wrote in #67, our verification code isn't great. I've thought about deleting most of it because it is a big pile of complexity to maintain. The main reason I'd like to keep it is that it can serve as a check that our signing code works as expected. But at the end of the day Apple's verification code is the only code that matters. I strongly encourage use of Apple's codesign
to verify signing performed by rcodesign
. Note that you get this verification implicitly during notarization.
from apple-platform-rs.
Too bad the verification code isn't in a good shape. I'm trying to figure out why Apple is refusing to notarize my application, but Apple doesn't have tools for debugging code signing issues. I've reported to them thatcodesign
and spctl
don't sufficiently explain why verification failed, and Apple responded that these tools are not supposed be used for debugging, and it's intentional that they do not give any details!
from apple-platform-rs.
Related Issues (20)
- Team ID should only be included when signing with an Apple signed certificate
- Support library constraints HOT 4
- Differing binary identifiers within Universal Mach-O should be reconciled
- Firefox's `org.mozilla.updater` fails to validate with ` invalid Info.plist (plist or signature have been modified)`
- Don't fully load Mach-O binaries in memory
- Support for config files
- Support signing nested binaries with no entitlements HOT 4
- Can't sign macOS app generated by Unity HOT 4
- How to create a DMG ? HOT 1
- Add a LICENSE file
- --code-signature-flags Is Not Scopable HOT 1
- Notarization of Electron app fails due to hardened runtime disabled HOT 10
- PackageInfo struct: minimum_system_version field should be an Option<String> instead of Option<bool>
- Support easier integration of rcodesign with other tools
- Authority unavailable when signing in github action HOT 2
- When attempting to sign an app bundle with debug symbols shipped in it, rcodesign fails to properly detect app bundle. HOT 4
- DMG reader doesn't emit proper byte count for Ignore and Zero chunks HOT 1
- The cpio-archive package doesn't appear to support building NewC archives HOT 1
- cpio-archive should support "new crc" format - same as "new ascii" but includes file checksums
- hash mismatch for apple-codesign-0.27.0-x86_64-unknown-linux-musl.tar.gz.sha256 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from apple-platform-rs.