Commit 3746875
committed
release/darwin: add entitlements for code signing
The entitlements file is required for the codesign tool to sign
bitbox-bridge binary. The signing workflow looks something like this:
1. Sign the universal binary:
codesign -f --timestamp --strict -o runtime \
--entitlements entitlements.plist \
-s <app-cert-identity> \
bin/bitbox-bridge
2. Produce the pkg installer with an extra --sign flag to productbuild:
productbuild --distribution ... \
--sign <installer-cert-identity> \
macos-installer.pkg
3. Submit the pkg for notarization:
xcrun altool --notarize-app \
--primary-bundle-id ch.shiftcrypto.bitboxbridge \
--username [email protected] \
--file macos-installer.pkg
4. Once notarized, staple the ticket onto the installer pkg for offline
distribution:
xcrun stapler staple macos-installer.pkg
I have a script that does all of the above but it needs a bit more
work. With this commit, I just want to release v1.3.0. Will add the
scripts afterwards.1 parent 709e426 commit 3746875
1 file changed
+15
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
0 commit comments