Re: Code signing question - HELP :-)
Re: Code signing question - HELP :-)
- Subject: Re: Code signing question - HELP :-)
- From: "B.J. Buchalter" <email@hidden>
- Date: Wed, 22 Aug 2012 01:40:10 -0400
Hi Tahome,
You don't really need to sign your AU (yet). AFAICT, nothing will check the signature.
You will need to sign the installer you use to install the AU.
But if you really want to sign it, I have written a script that will sign any bundle with a signature that is the same as what Xcode would do. Here it is (everything between the ====):
=====
#!/bin/bash
# set -x
prog=$1
plist=${prog}/Contents/Info
# copy the file and use the copy because defaults seems to have problems with long paths
# use defaults to read the CFBundleIdentifier from the target bundle
cp "${prog}/Contents/Info.plist" /tmp/Info.plist
plist="/tmp/Info"
bundleid=$(defaults read "$plist" CFBundleIdentifier)
signingId="Developer ID Application: <your_id_name>"
signingSerial="<your_certificate_OU>"
requirements="designated => anchor apple generic and identifier \"$bundleid\" and ((cert leaf[field.1.2.840.113635.100.6.1.9] exists) or ( certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU]=\"$signingSerial\" ))"
codesign -f -s "$signingId" -r="$requirements" "$prog"
codesign -vvvv "$prog" # this just verifies the signature
=====
You need to replace the <your_id_name> with the right info so that it uses your DeveloperID certificate from your keychain
You also need to replace <your_certificate_OU> with the "Organizational Unit" serial number from your DeveloperID certificate (you can look this up in keychain access).
Put this in a script called ml_codesign and then use it like:
ml_codesign <path_to_bundle>
Hope this helps,
B.J. Buchalter
Metric Halo
http://www.mhlabs.com
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Coreaudio-api mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden