Notarizing

[Marty Knapp]

Thank you Matthias! I appreciate you getting back to me so quickly and for all your work on this - very helpful.

---
Marty Knapp

> On Sep 4, 2019, at 12:23 PM, Matthias Rebbe via use-livecode <use-livecode at lists.runrev.com> wrote:
> 
> Hello Marty,
> 
> i am reallly sorry if my explanations were not clear enough, as not native English it´s sometimes a little bit difficult to find the correct technical expressions in English.
> 
> Apple´s email is a generic email. So just ignore the part with the exporting in it.
> 
> 
> The complete Notarizing process  is a 2 step process 
> 1 - Notarizing (required)
> 2 - Stapling (optional)
> 
> Step 1  uploading a DMG containing the app or a Zip containingg the app to Apple.
> Apple then is checking the App in the DMG /ZIP. The result of the check then is sent to you in a confirmation email.
> If the email informs you, that the app  is ready for distribution, then you could distribute the Zip or the DMG, right away.
> 
> But without Step 2 everytime the app is launched on the customer´s Mac, Gatekeeper connects to Apple´s servers and asks if the App was notarized. If this is confirmed by Apple then the App will be launched. But in case there is no internet connection available, then Gatekeeper cannot connect to Apple´s servers and therefore the app cannot be launched.
> 
> So, although the 2nd step is not mandatory, it is recommended.
> The 2nd step then is Stapling the Notarization ticket id to the app. With this ticket attached to the App/DMG the app can be launched on the customer´s Mac without Gatekeeper asking Apple about the Notarization status.
> 
> 
> My Helper stack is doing both steps. So the DMG and the app in it and also the source app are notarized and stapled.
> When doing the 2 steps but uploading a Zip file with the stack, then only the source app is stapled, as it is not possible to staple a Zip file.
> 
> I´ve created a litte diagram which shows an overview about Notarization and Stapling using the DMG or Zip method. Maybe this is useful
> 
> https://dl.qck.nu/?dl=Notarize_an_App.pdf <https://dl.qck.nu/?dl=Notarize_an_App.pdf>
> 
> 
> Regards,
> 
> Matthias
> 
> Matthias Rebbe
> Matthias Rebbe
> 
> free tools for Livecoders:
> InstaMaker <https://instamaker.dermattes.de/>
> WinSignMaker Mac <https://winsignhelper.dermattes.de/>
> 
>> Am 04.09.2019 um 18:41 schrieb Marty Knapp via use-livecode <use-livecode at lists.runrev.com <mailto:use-livecode at lists.runrev.com>>:
>> 
>> Hello Matthias,
>> I hope you don’t mind me asking a question, but perhaps other are confused too. I have successfully notarized my app and I get an email from Apple saying that is was successful and that I can now “export" and distribute my app. So that confused me. Perhaps that’s just a step for folks who build apps in Xcode? If not, from where do I export? Or is my local DMG or app (the zipped version I would presume) now notarized and stapled?
>> 
>> Thanks for all your work on this - it is much appreciated.
>> 
>> ---
>> Marty Knapp
>> _______________________________________________
>> use-livecode mailing list
>> use-livecode at lists.runrev.com <mailto:use-livecode at lists.runrev.com>
>> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
>> http://lists.runrev.com/mailman/listinfo/use-livecode
> 
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode