Signing and Notarization FAQ: what changed
Revision 1 to 2. Removed lines have a minus sign; added lines have a plus sign.
| Old | New | Line | |
|---|---|---|---|
| 1 | 1 | ## Questions and Answers | |
| 2 | 2 | ||
| 3 | 3 | **Question:** Official Mac page (which assumes Xcode) says one must bind to 10.9 SDK but can deploy/target older macOS releases for hardening/notarization: <https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution> | |
| 4 | 4 | ||
| 5 | 5 | So has anyone here tried? If I target 10.9 instead of 10.8 (which I currently do to avoid some compilation problems when targeting older) I believe I will hinder my software in running on old macOS versions. | |
| 6 | 6 | ||
| 7 | 7 | **Answer:** I don't have any idea about the necessity in terms of notarisation, but it's perfectly possible to link against a newer SDK (-XR) while targeting an older macOS version (-WM). The two have been decoupled by Apple since quite a while now. | |
| 8 | 8 | ||
| 9 | 9 | *Source: <https://forum.lazarus.freepascal.org/index.php/topic,47637.0.html>* | |
| 10 | 10 | ||
| 11 | 11 | ------------------------------------------------------------------------ | |
| 12 | 12 | ||
| 13 | 13 | **Question:** Is notarization/hardening necessary at present in Catalina? | |
| 14 | 14 | ||
| 15 | 15 | **Answer:** You can still open non-codesigned/non-notarized applications on Catalina in exactly the same way as on older macOS versions: via right-click or control-click -\> Open. The main difference in Catalina is that codesigning is basically useless now without notarization, because it will still result in a warning and the requirement for the right-click/control-click workaround. | |
| 16 | 16 | ||
| 17 | 17 | *Source: <https://forum.lazarus.freepascal.org/index.php/topic,47636.0.html>* | |
| 18 | 18 | ||
| 19 | 19 | ------------------------------------------------------------------------ | |
| 20 | 20 | ||
| 21 | 21 | **Question:** Code signing fails with *errSecInternalComponent*. What's wrong? | |
| 22 | 22 | ||
| 23 | 23 | **Answer:** If you are using an ssh session to the Apple computer, this occurs when the login keychain is locked. Before attempting code signing, unlock the login keychain with this command: | |
| 24 | 24 | ||
| 25 | - | ||
| 25 | + | ```text | |
| 26 | + | $ security unlock-keychain login.keychain | |
| 27 | + | ``` | |
| 26 | 28 | ||
| 27 | 29 | ------------------------------------------------------------------------ | |
| 28 | 30 | ||
| 29 | 31 | **Question:** My application is notarised successfully but is still denied by Gatekeeper. Why? | |
| 30 | 32 | ||
| 31 | 33 | **Answer:** Notarising your application is necessary to pass Gatekeeper, but it’s not sufficient. Gatekeeper has its own array of checks, and it’s easy to trip over one of those checks even though notarisation is successful. It’s not always easy to work out why Gatekeeper is unhappy. See [[macOS Gatekeeper Debugging Tips]]. | |
| 32 | 34 | ||
| 33 | 35 | *Source: <https://forums.developer.apple.com/thread/125567>* | |
| 34 | 36 | ||
| 35 | 37 | ------------------------------------------------------------------------ | |
| 36 | 38 | ||
| 37 | 39 | **Question:** My notarised application was working without complaint on macOS 10.15 but not on macOS 10.14. Why? | |
| 38 | 40 | ||
| 39 | 41 | **Answer:** You should always set *CFBundlePackageType* to *APPL* in your application `Info.plist` file. | |
| 40 | 42 | ||
| 41 | 43 | *Source: <https://developer.apple.com/forums/thread/77430>* | |
| 42 | 44 | ||
| 43 | 45 | ------------------------------------------------------------------------ | |
| 44 | 46 | ||
| 45 | 47 | ## See also | |
| 46 | 48 | ||
| 47 | 49 | - [[Notarization for macOS 10.14.5+]] | |
| 48 | 50 | - [[Code Signing for macOS]] | |
| 49 | 51 | - [[macOS Gatekeeper Debugging Tips]] | |
| 50 | 52 | ||
| 51 | 53 | --- | |
| 52 | 54 | *From the Free Pascal wiki, page "Signing and Notarization FAQ", as it stood on 2021-09-11 after a change by Trev, out of the wiki's dump of 2024-05-26. Copyright stays with the author who wrote it, according to the old wiki's [[Licensing]] page. If you have concerns about this material, [message the admin](/wiki-contact).* |