Deploy Qt4 Framework on Mac does not sign

SherifOmran

@SGaist
Yes i have libssl and libcrypto in the Frameworks
The following is plugin check, seems ok with all of them or do you notice something which i don't notice?

Plugin Check

Sherif:PlugIns sherifomran$ cd accessible/
Sherif:accessible sherifomran$ ls
libqtaccessiblewidgets.dylib
Sherif:accessible sherifomran$ otool -L libqtaccessiblewidgets.dylib 
libqtaccessiblewidgets.dylib:
	/usr/local/opt/qt/plugins/accessible/libqtaccessiblewidgets.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:accessible sherifomran$

Sherif:PlugIns sherifomran$ otool -L bearer/libqcorewlanbearer.dylib 
bearer/libqcorewlanbearer.dylib:
	/usr/local/opt/qt/plugins/bearer/libqcorewlanbearer.dylib (compatibility version 0.0.0, current version 0.0.0)
	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation (compatibility version 300.0.0, current version 1256.1.0)
	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration (compatibility version 1.0.0, current version 802.20.7)
	/System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLAN (compatibility version 1.0.0, current version 1.0.0)
	/System/Library/Frameworks/Security.framework/Versions/A/Security (compatibility version 1.0.0, current version 57337.20.43)
	@executable_path/../Frameworks/QtNetwork.framework/Versions/4/QtNetwork (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation (compatibility version 150.0.0, current version 1256.14.0)
	/usr/lib/libobjc.A.dylib (compatibility version 1.0.0, current version 228.0.0)
Sherif:PlugIns sherifomran$ otool -L bearer/libqgenericbearer.dylib 
bearer/libqgenericbearer.dylib:
	/usr/local/opt/qt/plugins/bearer/libqgenericbearer.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtNetwork.framework/Versions/4/QtNetwork (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$

Sherif:PlugIns sherifomran$ otool -L codecs/libq
libqcncodecs.dylib  libqjpcodecs.dylib  libqkrcodecs.dylib  libqtwcodecs.dylib
Sherif:PlugIns sherifomran$ otool -L codecs/libqcncodecs.dylib 
codecs/libqcncodecs.dylib:
	/usr/local/opt/qt/plugins/codecs/libqcncodecs.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$ otool -L codecs/libqjpcodecs.dylib 
codecs/libqjpcodecs.dylib:
	/usr/local/opt/qt/plugins/codecs/libqjpcodecs.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$ otool -L codecs/libqkrcodecs.dylib 
codecs/libqkrcodecs.dylib:
	/usr/local/opt/qt/plugins/codecs/libqkrcodecs.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$ otool -L codecs/libqtwcodecs.dylib 
codecs/libqtwcodecs.dylib:
	/usr/local/opt/qt/plugins/codecs/libqtwcodecs.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$

Sherif:PlugIns sherifomran$ otool -L imageformats/libq
libqgif.dylib   libqjpeg.dylib  libqtga.dylib   
libqico.dylib   libqmng.dylib   libqtiff.dylib  
Sherif:PlugIns sherifomran$ otool -L imageformats/*.dylib
imageformats/libqgif.dylib:
	/usr/local/opt/qt/plugins/imageformats/libqgif.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
imageformats/libqico.dylib:
	/usr/local/opt/qt/plugins/imageformats/libqico.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
imageformats/libqjpeg.dylib:
	/usr/local/opt/qt/plugins/imageformats/libqjpeg.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
imageformats/libqmng.dylib:
	/usr/local/opt/qt/plugins/imageformats/libqmng.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.5)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
imageformats/libqtga.dylib:
	/usr/local/opt/qt/plugins/imageformats/libqtga.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
imageformats/libqtiff.dylib:
	/usr/local/opt/qt/plugins/imageformats/libqtiff.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtGui.framework/Versions/4/QtGui (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.5)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$

Sherif:PlugIns sherifomran$ otool -L sqldrivers/libqsqlite.dylib 
sqldrivers/libqsqlite.dylib:
	/usr/local/opt/qt/plugins/sqldrivers/libqsqlite.dylib (compatibility version 0.0.0, current version 0.0.0)
	@executable_path/../Frameworks/QtSql.framework/Versions/4/QtSql (compatibility version 4.8.0, current version 4.8.7)
	@executable_path/../Frameworks/QtCore.framework/Versions/4/QtCore (compatibility version 4.8.0, current version 4.8.7)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 120.1.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1226.10.1)
Sherif:PlugIns sherifomran$

SGaist

IIRC, the id of your plugins should be updated to match where they are currently located.

SherifOmran

This post is deleted!

SherifOmran

@SGaist what is IIRC?

SGaist

IIRC = If I Recall Correctly

SherifOmran

@SGaist
do you know how to update the id of the plugin?

SGaist

install_name_tool -id

SherifOmran

@SGaist
I read about install_name_tool but confused between change and id
could you please give me example?

SGaist

install_name_tool -id /path/to/lib

SherifOmran

I made the following to the libraries and frameworks except plugins

install_name_tool -id @executable_path/../Frameworks/libcrypto.1.0.0.dylib MyApp.app/Contents/Frameworks/libcrypto.1.0.0.dylib

when i give make codesign it still fails

sandy.martel23

@SherifOmran said:

codesign] Error 1

Stupid question, but can you actually codesign something else ?

SherifOmran

@sandy.martel23
Very good, it is not studpid question, I tried to sign the library manually and it turned that i then signed each file in the plugin manually and then when i give
make codesign (it works)

codesign --sign '3rd Party Mac Developer Application: Sherif Omran (R3JGXHN3B3)' --keychain ~/Library/Keychains/login.keychain ./libcrypto.1.0.0.dylib

Thank you..

Next step, i need to create the package .. Could you please help me with the command?
when i give
make package -> it has error

SherifOmran

But after i codesigned it, the app does not start
Process: TypingTutor [10399]
Path: /Users/USER/Desktop/*/TypingTutor.app/Contents/MacOS/TypingTutor
Identifier: com.PCfone.ArabicTypingTutor
Version: 1.0.0 (5.1)
Code Type: X86-64 (Native)
Parent Process: ??? [1]
Responsible: TypingTutor [10399]
User ID: 501

Date/Time: 2016-02-05 20:39:38.405 +0100
OS Version: Mac OS X 10.11.3 (15D21)
Report Version: 11
Anonymous UUID: 70210516-2C20-592D-A84C-DD5E4F2AE6C1

Sleep/Wake UUID: D83EB830-6064-42B2-B9B1-2693E5916DDF

Time Awake Since Boot: 25000 seconds
Time Since Wake: 1600 seconds

System Integrity Protection: enabled

Crashed Thread: 0

Exception Type: EXC_BAD_ACCESS (Code Signature Invalid)
Exception Codes: 0x0000000000000032, 0x00000001004f5000
Exception Note: EXC_CORPSE_NOTIFY

kernel messages:
-1 sec CODE SIGNING: cs_invalid_page(0x1004f5000): p=10399[TypingTutor] final status 0x3000200, denying page sending SIGKILL
-1 sec CODE SIGNING: process 10399[TypingTutor]: rejecting invalid page at address 0x1004f5000 from offset 0x0 in file "/Users/USER/Desktop/*/TypingTutor.app/Contents/Frameworks/QtSql.framework/Versions/4/QtSql" (cs_mtime:1454627177.0 == mtime:1454627177.0) (signed:1 validated:1 tainted:1 wpmapped:0 slid:0)

SherifOmran

Report: This is a general report for somebody who may search later

main problem was validation process of appstore. I took 2 approaches
1- using make codesign (QT)
2- using xcode

in the first approach: The problem was make codesign fails, because it turned that i needed to codesign each file on its own. Then i reached a correct make codesign but make product fails to package the app.

In the second approach: The problem was framework embedding inside the application. App is written with Qt 4.8.7_2 and apple requests a new structure for the framework, in which there is a folder called A inside Versions folder, which does not exist and thus it failed. Note that, there is a folder called 4 inside which there is the framework, if we change this folder name from 4 to A as apple want, the app will crash.
Solution : Placed the frameworks inside a special folder and from xcode requested to embed the frameworks from this folder. From Terminal, i restructured the framework directory and made internal symbolic links inside the folder (Versions/A -> 4 and Versions/Current->4). In another works, created 2 symbolic links, one called A and the other called Current and both point to A.
Now Xcode, could validate and codesign, the output file uploaded to Appstore failed with Invalid build. Appstore send me an email stating what is failed. I will check, work on and let you know.

After correcting all error listed in the automatic email from Appstore that i could understand. There is only 1 error still and i would appreciate your help.

Final error -

Invalid Signature - The main app bundle TypingTutor at path TypingTutor.app has following signing error(s): --prepared:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib --validated:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib --prepared:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib --validated:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib --prepared:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/QtCore.framework/Versions/Current/. /Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app: unsealed contents present in the root directory of an embedded framework In subcomponent: /Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/QtCore.framework . Refer to the Code Signing and Application Sandboxing Guide at http://developer.apple.com/library/mac/#documentation/Security/Conceptual/CodeSigningGuide/AboutCS/AboutCS.html and Technical Note 2206 at https://developer.apple.com/library/mac/technotes/tn2206/_index.html for more information.

SGaist

Did you check the content of the Info.plist files ?

SherifOmran

The info plist seems correct ..
I doubt another thing, i use to create an Archive-> then open it manually and add the plugin folder and another dylib files to the framework and then validate with xcode and send to appstore ..

I am trying to find a way to include the files within the xcode validation.

SherifOmran

current problem is : unsealed content in QtCore.framework (root)

SGaist

Do you have more details coming with that ? e.g. current vs expected ?

SherifOmran

After long search, i found that this mistakes comes from redundance loop of a symbolic link
Inside the QtCore.framework/.../Resources, i found i made a symbolic link to the resources folder by mistake ..
Solution: I removed this symbolic link and resigned the files ..

For info how to code sign an already signed file is as follows:-

codesign --force --sign '3rd Party Mac Developer Application: Sherif Omran (R3JGXHN3B3)' --keychain ~/Library/Keychains/login.keychain ./AppFile.app

I ll let you know of the output of the upload as soon as i get the email report

SherifOmran

I still get the unsealed content error

Sherif:Applications sherifomran$ codesign --verify --deep --verbose=2 TypingTutor.app/
--prepared:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib
--validated:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib
--prepared:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib
--validated:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib
--prepared:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/QtCore.framework/Versions/Current/.
TypingTutor.app/: unsealed contents present in the root directory of an embedded framework
In subcomponent: /Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/QtCore.framework