2019-10-14
MacOS 10.15 "Catalina" won't run unsigned binaries by default, I am told. So precompiled programs, such as the precompiled Fossil binaries on this website, must be signed for maximum ease-of-use. Here are my notes on how to go about doing that, in general, gleaned from multiple documentation sources and experimentation.
Get an Apple Developer-ID. (Mine is "drh@sqlite.org").
Turn on 2FA on your Developer-ID
Install and run Xcode
Under Xcode/Preferences/Accounts, in the lower right-hand corner is a button for "Manage Certificates...". Click that button.
Click the "+" sign on the bottom left to get yourself a certificate.
Now you can sign binaries using a command like: "
codesign -s drh@sqlite.org fossil
"- Change "drh@sqlite.org" to your developer-id
- Change "fossil" to be the name of the executable you are trying to sign.
- You will get a GUI password prompt to authorize the signature