Notarisation for dummies

[Lindon]

@nesta99 said in Notarisation for dummies:

@lindon To be honest, I dont know what auval is and since I never remember to use it, then no.

run auval everytime on every AU plugin:

https://developer.apple.com/library/archive/documentation/MusicAudio/Conceptual/AudioUnitProgrammingGuide/AudioUnitDevelopmentFundamentals/AudioUnitDevelopmentFundamentals.html#//apple_ref/doc/uid/TP40003278-CH7-SW38

[Sawer]

@lindon Yeah true. Plugin not signed yet. I tried but not working ...

It says : "no identity found" . Any Idea?

[Lindon]

@nesta99 said in Notarisation for dummies:

@lindon Yeah true. Plugin not signed yet. I tried but not working ...

It says : "no identity found" . Any Idea?

sounds like you dont have the plugin ID set up correctly.. (as a guess)

[Sawer]

@lindon Ok thanks. Not finding anything specific related to this, neither a solution to this problem. Any idea? I got all the certificates in my keychain with their keys password.

[trillbilly]

@nesta99 I think @Lindon is talking about the Plugin ID in the HISE settings. I believe there is the Bundle Identifer (for Mac purposes) and the Plugin ID (which is usually 4 letters like Abcd). Make sure you have both setup correctly.

[Sawer]

@trillbilly @Lindon Ok, it's getting more intricate than expected.
In any case, I've finally managed to codesign the plugin, the problem was related to my certificate.
Now, the problem is that, Logic Pro doesn't see my plugin..
I really can't understand the issue now. At least, Logic Pro should see it, even if the plugin couldn't be validated by auvatool. But the plugin doesn't show up!
Any Idea?

[Lindon]

@nesta99 - Logic is one of the "picky" DAWs - it will look for your Plugin ID - that @trillbilly mentioned. Make sure this is correct AND UNIQUE

Logic goes through your plugins loading them and checking their Plugin ID's if there's a plug already loaded with the ID it is given it will not load your plugin...so every different plugin you build MUST have a different (unique) ID.

[Sawer]

@lindon alright. Thanks so much

[yall]

@Lindon @d-healey Hello, after a year without notarizing a pkg, I got back into this thing ^^
I had kept my identifiers, password; certificates.
so
I sign the plugin, ok
I sign my pkg, ok
I am trying to notarize my pkg. but,
I get a response from the terminal

"CFURLRequestSetHTTPCookieStorageAcceptPolicy_block_invoke: no longer implemented and should not be called"

. I received an email from apple was not notarized.
I have not changed anything compared to before, I have even just repaid my subscription.
I am using exact lines from command terminal.
something changed in the method according to you?

[Lindon]

@yall nope - all working Ok here last time I did it...

[yall]

@lindon said in Notarisation for dummies:

nope - all working Ok here last time I did it...

I don't understand what's going on then

[trillbilly]

@yall Maybe try new identifiers, passwords & certificates. Its always something small.

[yall]

@trillbilly I made mistakes at the start. I blocked my account I could no longer create a certificate. apple after 2 months of mail without concrete answers, apple decided to let me create 2 new certificates. they work. simply my notarization systematically fails with refusal mail. there must be a problem with my account or something like that. I'm sure of my handling. I've done it dozens of times. that said j ak sent to a friend who has a mac m1 with logic. my plugins and vst worked without being notarized. gatekeeper was disabled

[yall]

@Lindon finally my mistake was the following.
I used the basic signature whereas it is necessary to take the force deep code signature....
so my pkg are notarized successfully and then stapled.
I then put several pkg in a zip and signed then notarized the zip.
success too.
little question, as stapling the zip is not possible, only notarization is enough?

[DanH]

@yall I don’t notarise my zip files at all

[Lindon]

@danh said in Notarisation for dummies:

@yall I don’t notarise my zip files at all

like @DanH - I dont notarize my zips - I zip everything up after I have successfully done the code signing and notarizing...

[DanH]

Should I be able to codesign and notarize an app - as in a file with a .app extension?

Terminal says no. I want to supply a standalone app without an installer. It's only use is for downloading sample content.

Any info welcome.

PS - I'm happily codesigning and notarizing .pkgs...

[d.healey]

@danh You code sign pkgs?

[Lindon]

@d-healey said in Notarisation for dummies:

@danh You code sign pkgs?

yeah - you should.

[DanH]

@d-healey I do, yes, but does anyone know about .app's? Just pinging an app to users can result in the 'OSX cannot check it for malicious content' message.