[Pythonmac-SIG] codesigning py2app/wxPython app failing

[Kevin Walzer]

On 8/22/15 10:44 PM, Brendan Simon (eTRIX) wrote:
>
> $ codesign -vvvv -f --deep -s <mycredentials>dist/<myapp>.app
>
The "deep" flag doesn't work anymore. Pretty much every binary object 
must be signed.

Here's what I use to codesign one of my apps (the specific example is 
Perl, my current Python project is awaiting an update, but I'll roll 
something similar for the Python project).

First I start with the dylibs:

find build/FileMorph.app -type f -name "*.bundle"  -exec codesign 
--verbose --signature-size 9400 -f -s "My Credentials" {} \;
find build/FileMorph.app -type f -name "*.dylib"  -exec codesign 
--verbose --signature-size 9400 -f -s "My Credentials" {} \;

Next, the frameworks and executables:

codesign  --verbose --signature-size 9400 -f -s "My Credentials" 
build/FileMorph.app/Contents/Frameworks/Tk.framework/Versions/8.6/Resources/Wish.app/Contents/MacOS/Wish
codesign  --verbose --signature-size 9400 -f -s "My Credentials" 
build/FileMorph.app/Contents/Frameworks/Tk.framework/Versions/Current
codesign --verbose --signature-size 9400 -f -s "My Credentials" 
build/FileMorph.app/Contents/Frameworks/Tcl.framework/Versions/Current
codesign  --verbose --signature-size 9400 -f -s "My Credentials" 
build/FileMorph.app/Contents/MacOS/perl

Finally, the app itself:

codesign  --signature-size 9400 -f -s "My Credentials" --verbose=2 
build/FileMorph.app

> Is it a certificate issue perhaps?  I purchased a class2 cert from 
> sslstart.com.  I was a renewed one and I'm not 100% sure I'm using the 
> correct private key for the certificate.  Would that cause the above 
> errors?

I don't know if that's the specific issue here, but I do know that 
Gatekeeper does not recognize certificates from authorities other than 
Apple--not sure if codesign itself would flag a signature as non-valid 
if the cert was not issued by Apple's developer group.

--Kevin

-- 
Kevin Walzer
Code by Kevin/Mobile Code by Kevin
http://www.codebykevin.com
http://www.wtmobilesoftware.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/pythonmac-sig/attachments/20150822/830c9466/attachment.html>