Sign a Mac App, also sign the DMG?
paul at researchware.com
Thu Feb 4 12:03:13 EST 2021
We current ship a commercial app. We code sign, notarize, and staple our
App We then place it on a DMG using DropDMG, but do not code sign the
DMG. We distribute the DMG via our Web site and not the MacApp store.
QA testing on Catalina and Big Sur show only the usual "This (the DMG)
has been downloaded from the Internet" warning that your get even with a
signed DMG if downloading outside of the MacApp store. Where as a signed
DMG will not open on Mavericks and a couple other above 10.9.
We test on 10.9 to 10.16 as that is the range of MacOS versions
supported by LC.
On 2/4/2021 11:54 AM, Peter Bogdanoff via use-livecode wrote:
> To avoid the unidentifiable developer warning in recent macOS versions, you do need it signed. If your market is consumers, that is what they will have.
> DropDMG is great.
>> On Feb 4, 2021, at 8:49 AM, Klaus major-k via use-livecode <use-livecode at lists.runrev.com> wrote:
>> Hi Paul,
>>> Am 04.02.2021 um 17:46 schrieb Paul Dupuis via use-livecode <use-livecode at lists.runrev.com>:
>>> If the App is Signed and Notarized, it is actually best NOT to sign the DMG.
>>> Older versions of MacOS (like Mavericks, etc.) have a problem with signed DMGs
>> thank you very much, very helpful!
>>>> On 2/4/2021 11:40 AM, Klaus major-k via use-livecode wrote:
>>>> Hi friends,
>>>> quick question, now we have a Mac app, signed and notarized
>>>> and what not, is it also neccessary for the DMG we create from
>>>> that app for distribution?
>>>> Thanks for any insight!
>> Klaus Major
>> klaus at major-k.de
>> use-livecode mailing list
>> use-livecode at lists.runrev.com
>> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
More information about the use-livecode