site_archiver@lists.apple.com Delivered-To: cocoa-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rogers.com; s=s2048; t=1559079788; bh=B6lnRUkrNfbbVYBMEZsds78nZK02yQL1j3sXW56tPNc=; h=From:Subject:To:Date:From:Subject; b=mnrR3A33l0xtY41ebsjoC1WhWLopY6IvVttfJQZDtW/IDrGrcWnCTRRrR9njTEPx5T0u00MmOpZOREpeoFS5EtctTr692tftqEEiuoNMz7DrWz5WpkHCgIbDKhsfc5fXpIrmsyYwF7U61EoZNzTxhUZgcJsMqB+g2o2BHsnI0Q06vRJjSBS2fpvXQoedaR11vT1G9PLQdK6n2CWimEaG1uwE6dvEwO9LssI6ye+AhZV9/GtBw9sAFzYO4PUZrt+w/tcqFZWgx7qtGgylEbPcdrNw7hTSWXBdq5xktmUNNpIrJwhMtZTYRgAKoWDUQoTKx/TJUiVuXB9y3w6U9weKeA== User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 Hi all, "AppName.zip/AppName.app/Contents/Resources/EWSMacCompress.tar.gz/EWSMacCompress.tar/EWSMac.framework/Versions/A/EWSMac83886082" "The signature algorithm used is too weak." Additional info: -A search on this error didn't produce anything useful. Any help will be appreciated! Thanks, Leo _______________________________________________ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/cocoa-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com I wonder if anyone's familiar with this error which only happens when I send my apps for notarization: -I've been signing my apps for years with no issues. The error only happens when sending the apps for notarization. -I submitted a bug back in November 2018, provided Apple all the info they asked for - but it was never addressed further. -I recently contacted Apple again and they pointed me to some resource page that was created back in 2016. It briefly mentions a similar error - but still without any info on how to solve it: https://developer.apple.com/library/archive/technotes/tn2206/_index.html#//a... -The tar.gz file in question is an eSellerate licensing framework. As many people may know, it's been a popular licensing??platform for Mac software for over a decade. While I switched to a different licensing platform some time ago, I still have thousands of customers with eSellerate licenses (as I'm sure is the situation with many other Mac developers). As far as I understand, this whole situation has to do something with signing files inside tar.gz archives - on which I couldn't find any info either