Re: Do I need to codesign my .app, or just the installer?
Re: Do I need to codesign my .app, or just the installer?
- Subject: Re: Do I need to codesign my .app, or just the installer?
- From: James Walker <email@hidden>
- Date: Wed, 19 Jun 2013 11:15:31 -0700
On 6/18/2013 6:53 PM, Stephen Kay wrote:
This relates to having customers download an installer OUTSIDE of the App
Store (i.e. directly from my web site).
I've finally finished porting an older Carbon PPC app to a Universal version
capable of running on 10.7 and 10.8. (Due to the age of the app, I'm stuck
with using Xcode 3.2.6 on 10.6.8 for the actual coding/building, so I don't
have access to some of the newer codesigning features, from what I
understand...)
I'm still using a MindVision VISE-X Installer, which creates an
Installer.app. (I understand that I should probably transition away from
this to Package-based installers, but for now, this works, as I've been
doing it for years, without having to learn a new installer technology.)
I'm new to this whole code-signing thing, but from what I've gathered (and
tested), it seems that as long as I codesign the MindVision Installer.app
with my Developer ID Application, it works to download and install on 10.8
properly.
After getting my Developer Certificates properly installed, I'm using the
command line like this (which is what MindVision advised...):
codesign -s "Developer ID Application" "My Installer.app" -fv
... which then successfully prints out:
My Installer.app: signed bundle with Mach-O universal (i386 ppc)
[com.MindVision.VISEX]
I'm not sure it's that simple. In my experience, if you're going to
sign with Xcode 3.2.6 in a way that is fully functional, you have to
first sign something with Xcode 4 to find the magic parameters to pass
to codesign. I've seen some discussions of this issue online, but I
don't have a link handy.
The whole download and installation procedure then seems to work with
GateKeeper (on 10.8) as it is supposed to. Once it's all installed, the
"real" app runs fine without any difficulties - or further GateKeeper
prompts.
So, my question: Is it necessary for me to codesign the "real" app as well,
for any particular reason, or is this all I need to do?
You should read "The Benefits of Signing Code" here:
<https://developer.apple.com/library/mac/#documentation/security/Conceptual/CodeSigningGuide/AboutCS/AboutCS.html>
--
James W. Walker, Innoventive Software LLC
<http://www.frameforge3d.com/>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden