instal the last version for apple Seal of Evil

Hopefully this thread will allow other people to avoid this pitfall in the future!Īnd I do sincerely hope that Apple will improve their command line tools and the console output from Gatekeeper to make this sort of issue much easier to debug. Without -keepParent the topmost directory in the zip will be 'Contents' rather than 'myApplication.app', and the ticket won't contain cdhashes for anything except the app's main executable. It should have been this:ĭitto -ck -rsrc -sequesterRsrc -keepParent /path/to/myApplication.app What's missing is the -keepParent option. I was using ditto like so to zip the app:ĭitto -ck -rsrc -sequesterRsrc /path/to/myApplication.app The issue was that the scripts I wrote for zipping an app to send to Apple's notary service had a fatal (and apparently common) bug.

And due to the black-box nature of notarizing there's no way for me to figure out what's going wrong other than to ask here!Īfter opening a TSI, eskimo was able to help me sort out what I was doing wrong. What's going wrong? I've had so many headaches due to the new notarization requirement, so I'm quite dismayed I've run into another one. I haven't changed anything significant in the app since its last release, aside from a few bugfixes, nor have I changed the method I use to sign or notarize it. Previous versions of the app had no issue with notarization.

XYZ.app: satisfies its Designated Requirement The same zip file works fine in 10.14.6 and earlier.Īll of the usual checks to make sure the app is signed and notarized properly report that it is: However, when I download a zipped copy of the app in macOS 10.15.5 and try to run it, I get the '“XYZ” can’t be opened because Apple cannot check it for malicious software' error message. I've just built an app, signed it with my Developer ID certificate, and had it successfully notarized.

Instal the last version for apple Seal of Evil