You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The entitlements file is required for the codesign tool to sign
bitbox-bridge binary. The signing workflow looks something like this:
1. Sign the universal binary:
codesign -f --timestamp --strict -o runtime \
--entitlements entitlements.plist \
-s <app-cert-identity> \
bin/bitbox-bridge
2. Produce the pkg installer with an extra --sign flag to productbuild:
productbuild --distribution ... \
--sign <installer-cert-identity> \
macos-installer.pkg
3. Submit the pkg for notarization:
xcrun altool --notarize-app \
--primary-bundle-id ch.shiftcrypto.bitboxbridge \
--username user@example.org \
--file macos-installer.pkg
4. Once notarized, staple the ticket onto the installer pkg for offline
distribution:
xcrun stapler staple macos-installer.pkg
I have a script that does all of the above but it needs a bit more
work. With this commit, I just want to release v1.3.0. Will add the
scripts afterwards.
0 commit comments