Can't codesign Mac app

[matthias_livecode_150811 at m-r-d.de]

Hello Jacque,

didn't you get the reason back why the app is rejected when you run 'spctl --assess --raw --verbose <appPath>' ?

I've tested here now with a simple LC app which opens an https url. The https call makes sure, that revsecurity is included in the app bundle.
I've code signed and notarized that standalone with my Helper stack V4 on Ventura and tested it then on macOS Sonoma.
The app can be executed on Sonoma and    spctl --assess --raw --verbose <appPath>
returns the following on Sonoma.

/Users/matthias/Downloads/jacque/Untitled 1/Untitled 1.app: accepted
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>assessment:authority</key>
	<dict>
		<key>assessment:authority:flags</key>
		<integer>2</integer>
		<key>assessment:authority:row</key>
		<integer>6</integer>
		<key>assessment:authority:source</key>
		<string>Developer ID</string>
	</dict>
	<key>assessment:remote</key>
	<true/>
	<key>assessment:verdict</key>
	<true/>
</dict>

I am not sure why your app i rejected. If you want to, i could test your app with spctl.... here on Sonoma.

Did you by any chance add additonal data to the standalone after it was built?

Or are you using any additional code which might be not in the right place in the bundle?
There is an archive topic about this here
https://developer.apple.com/forums/thread/114943

I am really sorry that i am of no real help.

Regards

Matthias




> Am 10.10.2023 um 03:28 schrieb J. Landman Gay via use-livecode <use-livecode at lists.runrev.com>:
> 
> Thank you, I'll try that. Meanwhile, I ran this on a supposedly notarized/signed app:
> 
>  spctl --assess --raw --verbose <appPath>
> 
> which was rejected. Does his mean anything to anyone:
> 
> <?xml version="1.0" encoding="UTF-8"?>
> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
> <plist version="1.0">
> <dict>
> 	<key>assessment:authority</key>
> 	<dict>
> 		<key>assessment:authority:flags</key>
> 		<integer>0</integer>
> 	</dict>
> 	<key>assessment:remote</key>
> 	<true/>
> 	<key>assessment:verdict</key>
> 	<false/>
> </dict>
> </plist>
> 
> 
> On 10/9/23 8:10 PM, Timothy Bleiler via use-livecode wrote:
>> I think this is the most recent lesson listing the terminal commands for using NotaryTool instead of altool.
>> These worked when I was using the last version of Ventura and Xcode 14.3.1.  I haven’t tried Sonoma.
>> <https://lessons.livecode.com/m/4071/l/1653720-code-signing-and-notarizing-your-lc-standalone-for-distribution-outside-the-mac-appstore-with-xcode-13-and-up>
>> Code signing and notarizing your LC standalone for distribution outside the Mac Appstore with Xcode 13 and up | How To - Step-By-Step Guides To Tasks In LiveCode | LiveCode Lessons<https://lessons.livecode.com/m/4071/l/1653720-code-signing-and-notarizing-your-lc-standalone-for-distribution-outside-the-mac-appstore-with-xcode-13-and-up>
>> lessons.livecode.com<https://lessons.livecode.com/m/4071/l/1653720-code-signing-and-notarizing-your-lc-standalone-for-distribution-outside-the-mac-appstore-with-xcode-13-and-up>
>> [X]<https://lessons.livecode.com/m/4071/l/1653720-code-signing-and-notarizing-your-lc-standalone-for-distribution-outside-the-mac-appstore-with-xcode-13-and-up>
> 
> -- 
> Jacqueline Landman Gay         |     jacque at hyperactivesw.com
> HyperActive Software           |     http://www.hyperactivesw.com
> 
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode