Project

General

Profile

Actions

Task #2814

closed

Apple Notarization

Added by Florian Effenberger about 5 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Target version:
Team - Q3/2019
Start date:
Due date:
% Done:

0%


Description

We need to handle the Apple Notarization for our releases.
A test build with this feature is available from https://dev-builds.libreoffice.org/pre-releases/mac/x86_64/test_hardened_runtime/LibreOffice_6.3.0.0.alpha0_MacOS_x86-64.dmg

Actions #1

Updated by Florian Effenberger almost 5 years ago

Seems Apple is pushing this more from what I hear - is this done already for our builds?

Actions #2

Updated by Florian Effenberger almost 5 years ago

  • Target version changed from Q2/2019 to Q3/2019

I know there were efforts done and 6.3 builds should have Notarization enabled
Cloph, can you confirm? Anything pending, can we close this ticket?

Actions #3

Updated by Christian Lohmaier about 4 years ago

  • Status changed from New to Resolved

flagging this one as resolved - the notarization process/signing works, even if gatekeeper is not happy for some unknown reason, but that is is tracked in bugzilla.

6.3.x and 6.4.x builds are notarized.

# upload files to apple for notarization
for file in *.dmg; do xcrun altool --notarize-app --primary-bundle-id "some.identifier.to.tell.apart.releases$(echo $file | awk -F_ '/langpack/{sub(/.dmg/,""); print "."$6} /sdk/{print ".sdk"}')" --username "yourappleid" --password "@keychain:ID_FOR_APPSPECIFIC_PW_IN_KEYSTORE" --file $file; done 2>&1 |tee  -a ~/notarize.log

# staple (attach the verification result for offline-use, if not stapled apple would lookup in its online db - and likely even does when it is stapled if a connection is available)
for file in *.dmg; do xcrun stapler staple $file; done 2>&1|tee -a ~/stapler.log

Bugzilla ticket: https://bugs.documentfoundation.org/show_bug.cgi?id=126409#c24

Actions #4

Updated by Florian Effenberger about 4 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF