Wiki page
[How To Sign Mac Binaries] by
drh
2019-10-14 17:22:33.
D 2019-10-14T17:22:33.352
L How\sTo\sSign\sMac\sBinaries
N text/x-markdown
U drh
W 1060
*2019-10-14*
MacOS 10.15 "Catalina" won't run unsigned binaries by default, I am told.
So precompiled programs, such as the precompiled Fossil binaries on this
website, must be signed for maximum ease-of-use. Here are my notes on how
to go about doing that, in general, gleaned from multiple documentation
sources and experimentation.
1. Get an Apple Developer-ID. (Mine is "drh@sqlite.org").
2. Turn on 2FA on your Developer-ID
3. Install and run Xcode
4. Under Xcode/Preferences/Accounts, in the lower right-hand corner is a
button for "Manage Certificates...". Click that button.
5. Click the "+" sign on the bottom left to get yourself a certificate.
6. Now you can sign binaries using a command like:
"`codesign -s drh@sqlite.org fossil`"
<ol type="a">
<li> Change "drh@sqlite.org" to your developer-id
<li> Change "fossil" to be the name of the executable
you are trying to sign.
<li> You will get a GUI password prompt to authorize the signature
</ol>
Z 0fea94e597eb17f5f1d8290858d97133