Re: Puzzle with Hardened Runtime entitlement


Jack Brindle
 

The Notarization process is recursive, in that it works its way down the application structure and checks each part as it goes. If you have applications embedded in your app it will check those, and will give you a report for them as well as the top app. Your report shows the top level app being rejected, not something embedded inside. This assumes the Ortelius 2.app is not embedded inside uninstaller program. In our case, we do embed inside an installer, and have several apps embedded in our overall package, so our notarization reports tend to be extensive, with entries for each subpart.

In our case, because of how we build the applications (we have about 7 that had to be Notarized), we use the command line method for both signing and notarization. Hardened Runtime is part of the code sign process; I don’t remember it adding an entitlement file to our apps (although it could. I’ll have to check). In any case, we are not currently adding hardened runtime because one of the embedded apps (from a third-party developer) was not properly signed. As I noted before, hardened runtime is not a current Notarization requirement, although Notarizing through Xcode still causes it to be required.

I wonder if your application code signing is being redone, removing the hardened runtime that was previously performed.

Jack


On Oct 31, 2019, at 9:09 PM, Graham Cox <graham@...> wrote:



On 1 Nov 2019, at 2:19 pm, Jack Brindle via Groups.Io <jackbrindle@...> wrote:

Have you checked the Notarization report? That will tell you exactly why it failed.


Yes ,this is what it says, which is what I said in my original message here

2019-11-01 03:54:51 +0000  Distribution items ineligible: Error Domain=IDEDistributionMethodDeveloperIDErrorDomain Code=1 "Hardened Runtime is not enabled." UserInfo={NSLocalizedDescription=Hardened Runtime is not enabled., NSLocalizedRecoverySuggestion="Ortelius 2.app" must be rebuilt with support for the Hardened Runtime. Enable the Hardened Runtime capability in the project editor, test your app, rebuild your archive, and upload again.}


Except, as far as I can tell, the Hardened Runtime is enabled.

—Graham




Join cocoa@apple-dev.groups.io to automatically receive all group messages.