HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

DSP, Plug-in and Host development discussion.
AnalogObsession
KVRist
365 posts since 3 Oct, 2018

Post Wed Feb 05, 2020 12:52 am

Just checked log file and there are 2 errors.

"The binary is no signed with a valid Developer ID certificate"

"The signature does not include a secure timestamp"

But i did everything correct... Missing something?

Edit

Solved the issue. It was my bad. Used wrong cert.

But, Packages can't include timestamp and sign .pkg with correct cert. I had to manually sign .pkg file.
https://www.patreon.com/analogobsession Support for free VST2, VST3, AU for WIN & MAC

https://ampl.ink/G6qY0 New single is out! Click link to listen on Youtube, Spotify & iTunes!

User avatar
discoDSP
KVRAF
4575 posts since 18 Jul, 2002

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Thu Feb 13, 2020 5:04 am

AnalogObsession wrote:
Wed Feb 05, 2020 12:52 am
Packages can't include timestamp and sign .pkg with correct cert. I had to manually sign .pkg file.
Latest Whitebox Packages release has no issues with certificated signing.

Fender19
KVRist
447 posts since 30 Aug, 2012

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Sun Feb 16, 2020 9:07 am

It sometimes seems that Apple made this process as difficult and convoluted as possible.

For example, you can't notarize individual plugin binaries - they have to be zipped first and then notarized.

But then you can't STAPLE that notarized zip file - you have to extract the notarized plugin binaries first - then staple - then re-zip.

WTF?
:dog:

quikquak
KVRian
676 posts since 6 Aug, 2005 from England

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Sun Feb 16, 2020 6:34 pm

I've started to not use zip files anymore for installers, it's a waste of time and possibly confusing for computer-illiterate Apple users. 😑

User avatar
Lind0n
KVRist
120 posts since 2 Feb, 2005 from UK

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Mon Feb 17, 2020 7:43 am

OK I've been following the thread with trepidation/interest - now its time to start this whole process. First what I'm using:

Mojave
XCode 10
WhiteBox Packages 1.2.7
Apple Developer account/ID

What I want to distribute (all in the same single pkg....):
- AU
- VST
- Stand-Alone app
- a bunch of support files (none of them are executables)

What I think I need to do:

Codesign the AU
Codesign the VST
Codesign and Hardened Runtime enabled for the Stand-Alone App

Then I create the pkg, and submit that for notorization.
Then I staple the PKG

...and then I can zip this pkg up and load it onto the server

OK so where is this plan wrong?
VST/AU Developer for Hire

User avatar
Tale
KVRian
508 posts since 12 Apr, 2010 from The Netherlands

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Mon Feb 17, 2020 8:22 am

Lind0n wrote:
Mon Feb 17, 2020 7:43 am
OK so where is this plan wrong?
It isn't. :)

FigBug
KVRist
434 posts since 3 May, 2005 from Victoria, BC

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Mon Feb 17, 2020 5:51 pm

.pkg are already compressed, why zip it?

User avatar
discoDSP
KVRAF
4575 posts since 18 Jul, 2002

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Mon Feb 17, 2020 11:51 pm

Yep, you can submit .pkg directly. No need to zip.

User avatar
Lind0n
KVRist
120 posts since 2 Feb, 2005 from UK

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Tue Feb 18, 2020 7:57 am

OK great, didn't realise that about the pkg - thinking about it that make sense. So one less problem as a few Mac customers have had problems with zip files...

But thinking about it I realise I zip up the package as part of a bigger deliverable that includes the other materials and the windows installer... so zip is what its gotta be to have only one download archive...so thats why "zip the pkg"
VST/AU Developer for Hire

User avatar
discoDSP
KVRAF
4575 posts since 18 Jul, 2002

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Sun Feb 23, 2020 2:32 am

I have received a PM with a heads up regarding timestamp now being a requirement for plugin files (.component, .vst, .vst3)
https://developer.apple.com/documentati ... es#3087733

Terminal commands for the first page have been updated accordingly.

It's yet to be confirmed that previously notarized stuff without timestamp still works properly.

quikquak
KVRian
676 posts since 6 Aug, 2005 from England

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Sun Feb 23, 2020 5:47 am

I got tripped up by Xcode using 'Mac Developer' instead of the correct 'Developer ID Application'
Mac Developer worked before, but they like moving goal posts.
You do not have the required permissions to view the files attached to this post.

kv331
KVRAF
5912 posts since 14 Nov, 2006 from Ankara, Turkey

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Tue Feb 25, 2020 4:32 am

xhunaudio wrote:
Sat Sep 14, 2019 8:33 am
A very big thank you for your contribution, George.
+1 :hug: :party:
Works at KV331 Audio
SynthMaster voted #1 in MusicRadar's "Best Synth of 2019" poll
SynthMaster One voted #4 in MusicRadar's "Best Synth of 2019" poll

User avatar
discoDSP
KVRAF
4575 posts since 18 Jul, 2002

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Tue Feb 25, 2020 4:35 am

Thank you! Appreciated :)

User avatar
SPC Plugins
KVRist
101 posts since 28 Aug, 2011 from United Kingdom

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Thu Feb 27, 2020 12:55 am

Thank you for posting these instructions :)
discoDSP wrote:
Sat Sep 14, 2019 4:26 am
I'm stuck on this part. On the linked Apple Developer page it says:
1. Sign in to your Apple ID account page.
2. In the Security section, click Generate Password below App-Specific Passwords.
I don't see any 'security' section on my developer account?

User avatar
discoDSP
KVRAF
4575 posts since 18 Jul, 2002

Re: HOWTO macOS Mojave/Catalina notarization (plugins, app, pkg installers)

Post Thu Feb 27, 2020 1:42 am

SPC Plugins wrote:
Thu Feb 27, 2020 12:55 am
I don't see any 'security' section on my developer account?
Maybe it's because two factor authentication is off.
Screenshot 2020-02-27 at 10.41.07.png
You do not have the required permissions to view the files attached to this post.

Return to “DSP and Plug-in Development”