Questions tagged [osx-gatekeeper]

Gatekeeper is a new feature in OS X Mountain Lion that helps protect users from downloading and installing malicious software. Signing your applications, plug-ins, and installer packages with a Developer ID certificate lets Gatekeeper verify that they are not known malware and have not been tampered with.

Gatekeeper makes it safer to download apps by protecting you from inadvertently installing malicious software on your Mac. The safest place to download apps for your Mac is the Mac App Store. Apple reviews each app before it’s accepted by the store, and if there’s ever a problem with an app, Apple can quickly remove it from the store. When you download software from any other place on the Internet, Gatekeeper makes that safer, too. Developers can get a unique Developer ID from Apple and use it to digitally sign their apps. The Developer ID allows Gatekeeper to block apps created by malware developers and to verify that apps haven’t been tampered with. If an app was developed by an unknown developer — one with no Developer ID — Gatekeeper can keep your Mac safe by blocking the app from being installed.

126 questions
2
votes
1 answer

Is it possible to automatically code sign an AppleScript app?

I'm creating multiple AppleScript apps, each of which bundles presentation HTML into a single icon and opens it with Safari. I'd like to code sign the resulting Presentation.app file to prevent Gatekeeper from flagging it. I know that I can manually…
Mark Priddy
  • 626
  • 10
  • 19
2
votes
2 answers

Verification error after signing code in Qt bundle (CSSMERR_TP_NOT_TRUSTED, OSX)

I am trying to code-sign a desktop application binary for OSX Sierra with bought COMODO certificate. I have a code-signing verification error CSSMERR_TP_NOT_TRUSTED at the end of the macdeployqt command run: $ security unlock-keychain -p…
szszsz
  • 31
  • 5
2
votes
0 answers

signing cocoa app for distribution

I am trying to get xcode to sign my app using my distribution certificate, in such a way that the app verifies correctly using both the spctl and codesign verify command lines. This is an app that will be distributed by download, not via the Mac OS…
M Katz
  • 5,098
  • 3
  • 44
  • 66
2
votes
1 answer

Code signed apps on OS X Sierra 10.12 wont work old older macs, why?

I have 'identified developer' certificates from Apple. I have signed my app using Sierra via the commands line as my app is outside of xcode, signatures validate on Sierra as from an identified developer. Testing on Sierra allows installation when…
2
votes
1 answer

How to use productsign with mpkg containing smaller signed pkg files?

I have a parent installer package, say, called Parent.unsigned.mpkg that I would like to sign with OS X productsign. The file Parent.unsigned.mpkg contains children packages called A.pkg, B.pkg and C.pkg, which in turn install Clang-compiled…
Alex Reynolds
  • 95,983
  • 54
  • 240
  • 345
2
votes
1 answer

Will Gatekeeper kick in when launching an external unsigned applications from a signed application?

I'm developing an application that will launch other applications (by system("javaws ...) to be specific). My question is, if I sign my application with my Apple Identified Developer key, will Gatekeeper kick in and show popups / warnings if my…
aioobe
  • 413,195
  • 112
  • 811
  • 826
2
votes
1 answer

How to code sign mac app on osx

I have created an app on osx 10.9 using python 2.7 so not using xcode. I code signed it with certificate but when checked with spctl command, it is showing rejected. Commands are: codesign -s "3rd Party Mac Developer Application: Cloud Inc" -v -f…
imp
  • 1,967
  • 2
  • 28
  • 40
2
votes
1 answer

Codesign in Mavericks (10.9.4) Still Generating Version 1 Envelope

I'm trying to codesign an app package that will obey the GateKeeper changes in 10.9.5 and 10.10. The documentation I've seen states that you must codesign on a 10.9 system in order to create a Version 2 envelope. However, my 10.9.4 system is…
jerwood
  • 528
  • 1
  • 4
  • 12
2
votes
1 answer

Testing a Mac App on Registered Devices

I have a Cocoa Mac App that I don't know if it will on the Mac AppStore. The application is still in development, and I want few persons to be able to launch it on their devices while the app gets new features. The situation is the following : I…
Vince
  • 525
  • 1
  • 3
  • 19
2
votes
1 answer

Are entitlements required to for appA to execute an AppleScript that launches appB?

We have two signed Mac OS X apps (that we developed — non "app store" apps). appA runs an Applescript (from a .scpt file) that sends appB a message to launch and search for some text. This works perfectly on OS X 10.6. On OS X 10.7 and 10.8, I get…
SMGreenfield
  • 1,680
  • 19
  • 35
2
votes
2 answers

Developer ID ensures Gatekeeper accept?

What is the current Apple's policy? Speaking about Gatekeeper, they never mention that getting a Developer ID guarantees that your app will be allowed to run with the default Mac App Store and identified developers option. They never say that every…
Dmitry Isaev
  • 3,888
  • 2
  • 37
  • 49
2
votes
1 answer

How to sign Qt app with Mac Developer Id?

I have my first cross-platform app ready to release, developed with Qt 4.7.4, using Qt Creator (not Xcode). I thought I had everything ready to go: I have a script that runs macdeployqt and produces a .dmg, which works great. I'm not planning to…
David Burson
  • 2,947
  • 7
  • 32
  • 55
2
votes
0 answers

After Code Signing for Gatekeeper: cannot longer access keychain items for my app

I want to code sign my Mac software to make it ready for Gatekeeper and OS X Lion. So I changed to the build settings in Xcode and selected my Developer ID certificate. Building my project was successfully. But if I run this new app I cannot longer…
user469350
  • 141
  • 1
  • 2
  • 5
1
vote
1 answer

Perl Module Installation Mac OSX Gatekeeper

i can not install perl modules on my mac. The problem seems to be Gatekeeper. when modules contain binary libs (*.bundle) those libs have to be codesigned to be accepted by Gatekeeper. with the normal perl Makefile.PL make make test make install i…
Markus
  • 21
  • 2
1
vote
0 answers

Visual Studio Code not signed? Can't run on macOS Catalina

Downloaded VSCode-darwin-stable.zip from https://code.visualstudio.com/docs/?dv=osx Unzipped. Can't run. From terminal: % open /Applications/Visual\ Studio\ Code.app LSOpenURLsWithRole() failed with error -10810 for the file /Applications/Visual…
1 2 3
8 9