Deploy Qt4 Framework on Mac does not sign

SherifOmran

@SGaist
do you know how to update the id of the plugin?

SGaist

install_name_tool -id

SherifOmran

@SGaist
I read about install_name_tool but confused between change and id
could you please give me example?

SGaist

install_name_tool -id /path/to/lib

SherifOmran

I made the following to the libraries and frameworks except plugins

install_name_tool -id @executable_path/../Frameworks/libcrypto.1.0.0.dylib MyApp.app/Contents/Frameworks/libcrypto.1.0.0.dylib

when i give make codesign it still fails

sandy.martel23

@SherifOmran said:

codesign] Error 1

Stupid question, but can you actually codesign something else ?

SherifOmran

@sandy.martel23
Very good, it is not studpid question, I tried to sign the library manually and it turned that i then signed each file in the plugin manually and then when i give
make codesign (it works)

codesign --sign '3rd Party Mac Developer Application: Sherif Omran (R3JGXHN3B3)' --keychain ~/Library/Keychains/login.keychain ./libcrypto.1.0.0.dylib

Thank you..

Next step, i need to create the package .. Could you please help me with the command?
when i give
make package -> it has error

SherifOmran

But after i codesigned it, the app does not start
Process: TypingTutor [10399]
Path: /Users/USER/Desktop/*/TypingTutor.app/Contents/MacOS/TypingTutor
Identifier: com.PCfone.ArabicTypingTutor
Version: 1.0.0 (5.1)
Code Type: X86-64 (Native)
Parent Process: ??? [1]
Responsible: TypingTutor [10399]
User ID: 501

Date/Time: 2016-02-05 20:39:38.405 +0100
OS Version: Mac OS X 10.11.3 (15D21)
Report Version: 11
Anonymous UUID: 70210516-2C20-592D-A84C-DD5E4F2AE6C1

Sleep/Wake UUID: D83EB830-6064-42B2-B9B1-2693E5916DDF

Time Awake Since Boot: 25000 seconds
Time Since Wake: 1600 seconds

System Integrity Protection: enabled

Crashed Thread: 0

Exception Type: EXC_BAD_ACCESS (Code Signature Invalid)
Exception Codes: 0x0000000000000032, 0x00000001004f5000
Exception Note: EXC_CORPSE_NOTIFY

kernel messages:
-1 sec CODE SIGNING: cs_invalid_page(0x1004f5000): p=10399[TypingTutor] final status 0x3000200, denying page sending SIGKILL
-1 sec CODE SIGNING: process 10399[TypingTutor]: rejecting invalid page at address 0x1004f5000 from offset 0x0 in file "/Users/USER/Desktop/*/TypingTutor.app/Contents/Frameworks/QtSql.framework/Versions/4/QtSql" (cs_mtime:1454627177.0 == mtime:1454627177.0) (signed:1 validated:1 tainted:1 wpmapped:0 slid:0)

SherifOmran

Report: This is a general report for somebody who may search later

main problem was validation process of appstore. I took 2 approaches
1- using make codesign (QT)
2- using xcode

in the first approach: The problem was make codesign fails, because it turned that i needed to codesign each file on its own. Then i reached a correct make codesign but make product fails to package the app.

In the second approach: The problem was framework embedding inside the application. App is written with Qt 4.8.7_2 and apple requests a new structure for the framework, in which there is a folder called A inside Versions folder, which does not exist and thus it failed. Note that, there is a folder called 4 inside which there is the framework, if we change this folder name from 4 to A as apple want, the app will crash.
Solution : Placed the frameworks inside a special folder and from xcode requested to embed the frameworks from this folder. From Terminal, i restructured the framework directory and made internal symbolic links inside the folder (Versions/A -> 4 and Versions/Current->4). In another works, created 2 symbolic links, one called A and the other called Current and both point to A.
Now Xcode, could validate and codesign, the output file uploaded to Appstore failed with Invalid build. Appstore send me an email stating what is failed. I will check, work on and let you know.

After correcting all error listed in the automatic email from Appstore that i could understand. There is only 1 error still and i would appreciate your help.

Final error -

Invalid Signature - The main app bundle TypingTutor at path TypingTutor.app has following signing error(s): --prepared:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib --validated:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib --prepared:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib --validated:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib --prepared:/Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/QtCore.framework/Versions/Current/. /Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app: unsealed contents present in the root directory of an embedded framework In subcomponent: /Volumes/data01/app_data/dstr/mz_3951107737348925641dir/mz_287010058513639019dir/com.PCfone.ArabicTypingTutor.pkg/Payload/TypingTutor.app/Contents/Frameworks/QtCore.framework . Refer to the Code Signing and Application Sandboxing Guide at http://developer.apple.com/library/mac/#documentation/Security/Conceptual/CodeSigningGuide/AboutCS/AboutCS.html and Technical Note 2206 at https://developer.apple.com/library/mac/technotes/tn2206/_index.html for more information.

SGaist

Did you check the content of the Info.plist files ?

SherifOmran

The info plist seems correct ..
I doubt another thing, i use to create an Archive-> then open it manually and add the plugin folder and another dylib files to the framework and then validate with xcode and send to appstore ..

I am trying to find a way to include the files within the xcode validation.

SherifOmran

current problem is : unsealed content in QtCore.framework (root)

SGaist

Do you have more details coming with that ? e.g. current vs expected ?

SherifOmran

After long search, i found that this mistakes comes from redundance loop of a symbolic link
Inside the QtCore.framework/.../Resources, i found i made a symbolic link to the resources folder by mistake ..
Solution: I removed this symbolic link and resigned the files ..

For info how to code sign an already signed file is as follows:-

codesign --force --sign '3rd Party Mac Developer Application: Sherif Omran (R3JGXHN3B3)' --keychain ~/Library/Keychains/login.keychain ./AppFile.app

I ll let you know of the output of the upload as soon as i get the email report

SherifOmran

I still get the unsealed content error

Sherif:Applications sherifomran$ codesign --verify --deep --verbose=2 TypingTutor.app/
--prepared:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib
--validated:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libcrypto.1.0.0.dylib
--prepared:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib
--validated:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/libssl.1.0.0.dylib
--prepared:/Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/QtCore.framework/Versions/Current/.
TypingTutor.app/: unsealed contents present in the root directory of an embedded framework
In subcomponent: /Users/sherifomran/Library/Developer/Xcode/Archives/2016-02-07/TypingTutor 07-02-16 00.45.xcarchive/Products/Applications/TypingTutor.app/Contents/Frameworks/QtCore.framework

SherifOmran

I found the following information, but i don't understand it :
codesign says I have 'unsealed content' somewhere.
Do not put files or directories into the top directory of an app or framework bundle
All content must be inside Contents or Versions respectively as described earlier.
What do they mean?

My Framework structure is as follows:
QtGui.framework/
QtGui -> Versions/Current/QtGui
Resources -> Versions/Current/Resources/
Versions

SherifOmran

update 1:
I downloaded Qt5.5 and used the macdeployqt from version 5.5.1. It created the framework in a restructured way. However, it is missing the A folder inside the Versions. I created a symbolic link for it pointing to folder 4. I ve xcode project for recompiling and packaging. Xcode tries to sign the A folder.
codesign --force --sign 016A9E58DED20AC63F1157926166C4082C925F47 --preserve-metadata=identifier,entitlements --timestamp=none /MyApp.app/Contents/Frameworks/QtNetwork.framework/Versions/A

result----
bundle format unrecognized, invalid, or unsuitable
Command /usr/bin/codesign failed with exit code 1.

When i codesign the folder with
codesign --sign '3rd Party Mac Developer Application: XXXX XXXX (R3JGXHN3B3)' --keychain ~/Library/Keychains/login.keychain ./Versions/A
It works and xcode does not produce the same error but then when i submit, AppStore complains at unsigned framework at the root.

Question: Why doesnot this work? how to debug it?
codesign --force --sign 016A9E58DED20AC63F1157926166C4082C925F47 --preserve-metadata=identifier,entitlements --timestamp=none /MyApp.app/Contents/Frameworks/QtNetwork.framework/Versions/A

SGaist

What framework at the root ?

SherifOmran

Previous problem was solved and i can now sign the app. The following link, helped me to solve it.
[link Signing problem due to WWDR certificate](link https://www.reddit.com/r/iOSProgramming/comments/45siza/this_certificate_has_an_invalid_issuer/)

Current Issue is the following:
The framework folder has version folder and inside the version folder there is folder called 4. This 4 must be changed into A for apple to accept it. If we change it to A, the app will crash. This is even not integrated in macdeloyqt 5.5.

SGaist

In that case change the folder to A and call install_name_tool to fix the paths your application dependencies.