StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PO
text
Body
copied!<p>I think I may have figured this one out. I've been running Xcode 4.6.3 on OS X Mavericks, under the impression that any build-specific tools were bundled in the Xcode application.</p> <p>But, it seems <code>codesign</code> is in <code>/usr/bin</code>. Whether it's put there by one of the Xcode installers or comes with a vanilla system install, I'm not sure. But reading through the <code>man</code> page for <code>codesign</code>, I found this nifty option:</p> <pre><code>--deep When signing a bundle, specifies that nested code content such as helpers, frameworks, and plug-ins, should be recursively signed in turn. Beware that all signing options you specify will apply, in turn, to such nested content. When verifying a bundle, specifies that any nested code content will be recursively verified as to its full content. By default, verification of nested content is limited to a shallow investigation that may not detect changes to the nested code. When displaying a signature, specifies that a list of directly nested code should be written to the display output. This lists only code directly nested within the subject; anything nested indirectly will require recursive application of the codesign command. </code></pre> <p>And then I found this post (<a href="https://alpha.app.net/isaiah/post/6774960%29">https://alpha.app.net/isaiah/post/6774960</a>) from two weeks ago (~June 2013), which mentions (albeit second-handedly):</p> <blockquote> <p>@isaiah I asked a guy in the labs about it. He said codesign now requires embedded frameworks to be signed separately before code signing the app bundle as a whole.</p> </blockquote> <p>Manually re-running the <code>codesign</code> command that Xcode normally runs, while adding the <code>--deep</code> flag to the end, signs the application properly.</p> <p>I'm not yet sure exactly what ramifications this manual signing has, or whether I can tweak the Xcode build to add the <code>--deep</code> flag automatically, but this seems to be the underlying issue. (<code>codesign</code> no longer automatically deeply signs your app bundle.)</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload