codesign and Mac OS 10.9.5

Hello,

did anybody experiencing a problem with the code signature mechanism of OS X starting from 10.9.5 ? I can not sign my application since I upgraded to this version. I can sign the frameworks (compiled with xcode) without any problem but not the main executable (delivered by lw). I get this message : « main executable failed strict validation ».

I found this disturbing information in a Mac Developer Library FAQ :

codesign says my main executable failed strict validation.

Your Mach-O executable does not conform to modern Mach-O layout rules.
You may be using a third party development product that hasn't been brought up to date, or post-processed your file in unsupported ways.

Does this means that any application delivered with lw will not be able to be signed on os x in the future ?

Thanks in advance

Best regard

Denis

------------------------------------------------

Denis Pousseur

70 rue de Wansijn

1180 Bruxelles

+ 32 2 219 31 09

http://www.denispousseur.com

------------------------------------------------

Re: codesign and Mac OS 10.9.5

Hello Denis,

To run on OS X 10.9.5 and 10.10, applications must be signed with a recent version of codesign that produces version 2 code-signing information.

I had no problem code-signing a LW application with the most recent tools.

Best,

Camille

On Oct 25, 2014, at 16:56, Denis Pousseur <denis.pousseur@gmail.com> wrote:

Hello,

did anybody experiencing a problem with the code signature mechanism of OS X starting from 10.9.5 ? I can not sign my application since I upgraded to this version. I can sign the frameworks (compiled with xcode) without any problem but not the main executable (delivered by lw). I get this message : « main executable failed strict validation ».

I found this disturbing information in a Mac Developer Library FAQ :

codesign says my main executable failed strict validation.
Your Mach-O executable does not conform to modern Mach-O layout rules.
You may be using a third party development product that hasn't been brought up to date, or post-processed your file in unsupported ways.
Does this means that any application delivered with lw will not be able to be signed on os x in the future ?

Thanks in advance

Best regard

Denis

------------------------------------------------
Denis Pousseur
70 rue de Wansijn
1180 Bruxelles
+ 32 2 219 31 09
http://www.denispousseur.com
------------------------------------------------

Re: codesign and Mac OS 10.9.5

Denis Pousseur <denis.pousseur@gmail.com> writes:

> Well, I finally receives my Apple ID and it doesn't change
> anything. The result is always : « main executable failed strict
> validation »… 

I just verified that my binaries (made with LW 6.1 and the :split
:resources option to #'deliver) sign fine on my 10.9.5 system (haven't
tried my 10.10 system yet). The :split keyword was new in 6.0 AFAIK, so
I'm not surprised that you can't sign LW 5 apps. What does surprise me,
though, is that you get LW 5/5.1 to run under 10.9.5 at all - it doesn't
work on my system!
-- 
  (espen)

_______________________________________________
Lisp Hug - the mailing list for LispWorks users
lisp-hug@lispworks.com
http://www.lispworks.com/support/lisp-hug.html

Re: codesign and Mac OS 10.9.5

>>>>> On Fri, 07 Nov 2014 09:25:04 +0100, Espen Vestre said:
> 
> Denis Pousseur <denis.pousseur@gmail.com> writes:
> 
> > Well, I finally receives my Apple ID and it doesn't change
> > anything. The result is always : « main executable failed strict
> > validation »… 
> 
> I just verified that my binaries (made with LW 6.1 and the :split
> :resources option to #'deliver) sign fine on my 10.9.5 system (haven't
> tried my 10.10 system yet). The :split keyword was new in 6.0 AFAIK, so
> I'm not surprised that you can't sign LW 5 apps.

Yes, that is correct.  You can't sign a LispWorks binary unless it is saved
with the :split option, which is not available in LispWorks 5.

-- 
Martin Simmons
LispWorks Ltd
http://www.lispworks.com/

_______________________________________________
Lisp Hug - the mailing list for LispWorks users
lisp-hug@lispworks.com
http://www.lispworks.com/support/lisp-hug.html