I got the same result on the app after I ran it.  The app does launch properly. 
However, those changes happened after the app was downloaded.

-> codesign --verify -v T19.app
T19.app: a sealed resource is missing or invalid
file modified: /T19/T19.app/Contents/Database/T19.4DIndy
file modified: /T19/T19.app/Contents/Database/T19.4DC

Before uploading, this is the result:

-> codesign --verify -v T19/T19.app
T19/T19.app: valid on disk
T19/T19.app: satisfies its Designated Requirement

So from that state, I compress and upload the app, and when downloaded, the 
signature is still valid. The app then needs to be moved to a folder other than 
the Download folder. If you run the app from a disk image or Downloads folder 
you will likely run into problems with quarantine, because the app will be 
translocated when run.

Jim Crate

> On Apr 24, 2019, at 3:39 PM, Pat Bensky via 4D_Tech <[email protected]> 
> wrote:
> 
> Hi Jim,
> I ran the following in Terminal to check it:
> codesign -dv /Users/patbensky/CatBase\ dev/CatBase\ v8/Final\
> Application/CatBase\ 8.app
> 
> and this is the result:
> 
> Executable=/Users/patbensky/CatBase dev/CatBase v8/Final
> Application/CatBase 8.app/Contents/MacOS/CatBase 8
> 
> Identifier=4d.com.CatBase 8.app
> 
> Format=app bundle with Mach-O thin (x86_64)
> 
> CodeDirectory v=20200 size=133812 flags=0x0(none) hashes=4176+3
> location=embedded
> 
> Signature size=9042
> 
> Timestamp=24 Apr 2019 at 23:18:30
> 
> Info.plist entries=41
> 
> TeamIdentifier=8W63XCXWRA
> 
> Sealed Resources version=2 rules=13 files=2018
> 
> Internal requirements count=1 size=180
> 
> When I ran your suggested code
> codesign --verify -v /Users/patbensky/CatBase\ dev/CatBase\ v8/Final\
> Application/CatBase\ 8.app
> 
> I got:
> 
> a sealed resource is missing or invalid
> 
> file modified: /Users/patbensky/CatBase dev/CatBase v8/Final
> Application/CatBase 8.app/Contents/Database/CatBase 8.4DIndy
> 
> file modified: /Users/patbensky/CatBase dev/CatBase v8/Final
> Application/CatBase 8.app/Contents/Database/CatBase 8.4DC
> 
> 
> So that's a bit more informative ... Any idea what "sealed resource" is
> missing or invalid?
> 
> On Wed, 24 Apr 2019 at 23:30, Jim Crate via 4D_Tech <[email protected]>
> wrote:
> 
>> Are you sure the app is signed correctly? Sometimes an app with invalid
>> signature will launch until it is downloaded from the internet (downloading
>> sets the quarantine flag). I use these commands after signing to
>> double-check that signing worked properly:
>> 
>>  spctl -av "$appPath"
>>  codesign --verify -v "$appPath"
>> 
>> Also, I launch the app before signing to choose the datafile and update
>> the Info.plist with a more descriptive version string.
>> 
>> Jim Crate
>> 
>>> On Apr 24, 2019, at 9:42 AM, Pat Bensky via 4D_Tech <
>> [email protected]> wrote:
>>> 
>>> Actually it doesn't seem to be working ... it seems to corrupt the app in
>>> some way.
>>> It's quite bizarre ... I compile the app, sign it using Miyako's code,
>> and
>>> create a disk image using DropDMG. I check it by mounting the disk image
>>> and installing the app. It runs OK.
>>> Then I upload it to DropBox.
>>> Download it from Dropbox, open it, install it, and it will not run. The
>> app
>>> starts to open and then I get the message "CatBase 8 is damaged and can't
>>> be opened."
>>> 
>>> Any ideas?
>>> 
>>> On Thu, 4 Apr 2019 at 11:52, Pat Bensky <[email protected]> wrote:
>>> 
>>>> Brilliant, thank you Miyako!
>>>> Note that I needed to make one change to the code, in the method "code
>>>> sign":
>>>> 
>>>> Change
>>>> 
>>>> $infoPlistPath:=$applicationPath+Folder separator+\
>>>> 
>>>> "Contents"+Folder separator+"Info.plist"
>>>> 
>>>> 
>>>> to
>>>> 
>>>> 
>>>> $infoPlistPath:=$applicationPath+\
>>>> 
>>>> "Contents"+Folder separator+"Info.plist"
>>>> 
>>>> Pat
>>>> 
>>>> On Thu, 4 Apr 2019 at 01:32, Keisuke Miyako via 4D_Tech <
>>>> [email protected]> wrote:
>>>> 
>>>>> the text edit setting "smart dashes" may convert double hyphens to
>> dash,
>>>>> which is not what you want in this context.
>>>>> 
>>>>> https://support.apple.com/kb/PH23628?locale=ja_JP&viewlocale=en_US
>>>>> 
>>>>> a single hyphen must be used with a short option name (-f)
>>>>> a double hyphen must be used with a short option name (--force)
>>>>> 
>>>>> -force is therefore an invalid instruction (single hyphen+long option
>>>>> name).
>>>>> 
>>>>> I've posted a utility to ease the process of signing
>>>>> 
>>>>> https://github.com/miyako/4d-utility-build-application
>>>>> 
>>>>> it is written in v17 but the target app path can be any path.
>>>>> 
>>>>> 2019/04/03 8:05、Pat Bensky via 4D_Tech <[email protected]<mailto:
>>>>> [email protected]>>のメール:
>>>>> —force: No such file or directory
>>>>> 
>>>>> 
>>>>> **********************************************************************
>>>>> 4D Internet Users Group (4D iNUG)
>>>>> Archive:  http://lists.4d.com/archives.html
>>>>> Options: https://lists.4d.com/mailman/options/4d_tech
>>>>> Unsub:  mailto:[email protected]
>>>>> **********************************************************************
>>>> 
>>>> 
>>>> 
>>>> --
>>>> *************************************************
>>>> CatBase - Top Dog in Data Publishing
>>>> tel: +44 (0) 207 118 7889
>>>> w: http://www.catbase.com
>>>> skype: pat.bensky
>>>> *************************************************
>>>> 
>>> 
>>> 
>>> --
>>> *************************************************
>>> CatBase - Top Dog in Data Publishing
>>> tel: +44 (0) 207 118 7889
>>> w: http://www.catbase.com
>>> skype: pat.bensky
>>> *************************************************
>>> **********************************************************************
>>> 4D Internet Users Group (4D iNUG)
>>> Archive:  http://lists.4d.com/archives.html
>>> Options: https://lists.4d.com/mailman/options/4d_tech
>>> Unsub:  mailto:[email protected]
>>> **********************************************************************
>> 
>> **********************************************************************
>> 4D Internet Users Group (4D iNUG)
>> Archive:  http://lists.4d.com/archives.html
>> Options: https://lists.4d.com/mailman/options/4d_tech
>> Unsub:  mailto:[email protected]
>> **********************************************************************
> 
> 
> 
> -- 
> *************************************************
> CatBase - Top Dog in Data Publishing
> tel: +44 (0) 207 118 7889
> w: http://www.catbase.com
> skype: pat.bensky
> *************************************************
> **********************************************************************
> 4D Internet Users Group (4D iNUG)
> Archive:  http://lists.4d.com/archives.html
> Options: https://lists.4d.com/mailman/options/4d_tech
> Unsub:  mailto:[email protected]
> **********************************************************************

**********************************************************************
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[email protected]
**********************************************************************

Reply via email to