Skip to content

Commit 3746875

Browse files
committed
release/darwin: add entitlements for code signing
The entitlements file is required for the codesign tool to sign bitbox-bridge binary. The signing workflow looks something like this: 1. Sign the universal binary: codesign -f --timestamp --strict -o runtime \ --entitlements entitlements.plist \ -s <app-cert-identity> \ bin/bitbox-bridge 2. Produce the pkg installer with an extra --sign flag to productbuild: productbuild --distribution ... \ --sign <installer-cert-identity> \ macos-installer.pkg 3. Submit the pkg for notarization: xcrun altool --notarize-app \ --primary-bundle-id ch.shiftcrypto.bitboxbridge \ --username user@example.org \ --file macos-installer.pkg 4. Once notarized, staple the ticket onto the installer pkg for offline distribution: xcrun stapler staple macos-installer.pkg I have a script that does all of the above but it needs a bit more work. With this commit, I just want to release v1.3.0. Will add the scripts afterwards.
1 parent 709e426 commit 3746875

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed
Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
3+
<plist version="1.0">
4+
<dict>
5+
<!-- We listen on network ports -->
6+
<key>com.apple.security.network.server</key>
7+
<true/>
8+
<!-- We respond on network ports -->
9+
<key>com.apple.security.network.client</key>
10+
<true/>
11+
<!-- We communicate with usb devices -->
12+
<key>com.apple.security.device.usb</key>
13+
<true/>
14+
</dict>
15+
</plist>

0 commit comments

Comments
 (0)