PKG notarisation issue

[ustk]

I export the VST3, AU and AAX with the new integrated Export->Compile project feature.

Then I create the pkg with WhiteBox Packages like I always did, with a development certificate attached to it.

I created an app specific password
The notarisation starts, uploads, until...
...result status is Invalid

So I wonder:

• if someone here has already succeeded since the new export window has been added?
• if the hardened runtime is enabled in this process? Which I doubt, because it isn't in the auto-generated jucer...

I tried to export from xcode, but despite that the build succeeds, I can't find the output files anywhere (root & user plugin folders, project's binary folder...)
This way I would be sure if the hardened runtime has something to do with this problem...

[Dan Korneff]

I had this happen to me a couple months back. I think it ended up being an issue with a file that was part of the package. I haven't tried the new export feature yet, but I think you can get the log file to see the exact issue with:

xcrun notarytool log <submission-id>

[hisefilo]

@ustk if you codesign manually?

codesign --deep --force --options runtime --sign "Developer ID Application: YOUR ID" Your.app

[Dan Korneff]

my command line prompt looks like:

codesign --deep --force --timestamp --options runtime --sign 

[ustk]

@Dan-Korneff @hisefilo Thanks guy I'll try that and report!

My notary command line is:

xcrun notarytool submit --apple-id "email@id.com" --password "xxxx-xxxx-xxxx-xxxx" --team-id "THETEAMID" /Users/greg/Documents/_PROGRAMMING/SonitusMax/_PACKAGE/build/SonituxMax.pkg --wait

[HISEnberg]

@Dan-Korneff @ustk this was my solution too. I am fuzzy on the details but I think you need to force the codesigning of the .vst, .component, etc. before packaging it, then codesign the package too.

[ustk]

@HISEnberg @Dan-Korneff @hisefilo So it appears in the log that the plugins are not signed correctly for some reasons... I shall investigate why!

[ustk]

@Dan-Korneff @hisefilo @HISEnberg Alright that was that! I somehow messed up the codesign process...
You guys nailed it