Difference between revisions of "Signing and Notarization FAQ"
(Added another Q and A) |
m (Added headings and See also section) |
||
Line 1: | Line 1: | ||
{{Signing and Notarization FAQ}} | {{Signing and Notarization FAQ}} | ||
+ | |||
+ | = Questions and Answers = | ||
'''Question:''' Official Mac page (which assumes Xcode) says one must bind to 10.9 SDK but can deploy/target older macOS releases for hardening/notarization: https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution | '''Question:''' Official Mac page (which assumes Xcode) says one must bind to 10.9 SDK but can deploy/target older macOS releases for hardening/notarization: https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution | ||
Line 26: | Line 28: | ||
----- | ----- | ||
+ | |||
+ | = See also = | ||
+ | |||
+ | * [[Notarization for macOS 10.14.5+]] | ||
+ | * [[Code Signing for macOS]] |
Revision as of 09:40, 1 March 2020
│ English (en) │
This article applies to macOS only.
See also: Multiplatform Programming Guide
Questions and Answers
Question: Official Mac page (which assumes Xcode) says one must bind to 10.9 SDK but can deploy/target older macOS releases for hardening/notarization: https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution
So has anyone here tried? If I target 10.9 instead of 10.8 (which I currently do to avoid some compilation problems when targeting older) I believe I will hinder my software in running on old macOS versions.
Answer: I don't have any idea about the necessity in terms of notarisation, but it's perfectly possible to link against a newer SDK (-XR) while targeting an older macOS version (-WM). The two have been decoupled by Apple since quite a while now.
Source: https://forum.lazarus.freepascal.org/index.php/topic,47637.0.html
Question: Is notarization/hardening necessary at present in Catalina?
Answer: You can still open non-codesigned/non-notarized applications on Catalina in exactly the same way as on older macOS versions: via right-click or control-click -> Open. The main difference in Catalina is that codesigning is basically useless now without notarization, because it will still result in a warning and the requirement for the right-click/control-click workaround.
Source: https://forum.lazarus.freepascal.org/index.php/topic,47636.0.html
Question: Code signing fails with errSecInternalComponent. What's wrong?
Answer: If you are using an ssh session to the Apple computer, this occurs when the login keychain is locked. Before attempting code signing, unlock the login keychain with this command:
$ security unlock-keychain login.keychain