So I _think_ things are working now, although I'm starting to wonder how they're working, give that I think Catalina is insisting that all apps run in "hardened" mode (perhaps I'm wrong on this), and that there's simply no way for a hardened app to load a library that has a "target" < 10.9. The fact that libraries are loading at all makes me think that 0.51-0 test 2 is OK as far as signing goes.
But then I wonder how pre-10.9 externs (libraries) can ever work at all under Catalina. I'm not even feeling sure that the ones in pd/extra should work: I think their target is 10.7 (I compiled them on a 10.7 machine) - but perhaps they work anyway as having fallen under the app when the app itself was signed. I'm willing to get hold of a newer machine somehow if that proves necessary (and someday I'm sure it will) but want to put that off as long as I can, since each year seems to bring more ways Apple can shaft us. M On Sat, May 30, 2020 at 11:54:44PM +0200, Dan Wilcox wrote: > Back to the original discussion from pd-dev, looking at this: > > https://urldefense.com/v3/__https://cutecoder.org/programming/shared-framework-hardened-runtime/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBXWOX-gk$ > > <https://urldefense.com/v3/__https://cutecoder.org/programming/shared-framework-hardened-runtime/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBXWOX-gk$ > > > > If the externals (aka dynamic libs) are built with a macOS deployment target > >= 10.9, then they should work without throwing an error. If they are not or > are simply older with an older deployment target, they will run into the > loading issue. I had added adhoc code-signing and the > disable-library-validation exception entitlement to the app build process, so > that should make this work, or at least I thought it would. > > > On May 30, 2020, at 11:39 PM, [email protected] wrote: > > > > Date: Sat, 30 May 2020 14:36:21 -0700 > > From: Kevin Haywood <[email protected] <mailto:[email protected]>> > > To: Christof Ressi <[email protected] <mailto:[email protected]>> > > Cc: Pd-List <[email protected] <mailto:[email protected]>> > > Subject: Re: [PD] [PD-announce] pd 0.51-0test2 for Macontosh - another > > try at code signing > > Message-ID: <[email protected] > > <mailto:[email protected]>> > > Content-Type: text/plain; charset="utf-8" > > > > > >> On May 30, 2020, at 1:46 PM, Christof Ressi <[email protected] > >> <mailto:[email protected]>> wrote: > >> > >>> For some still-inexplicable reason, my externals started working again in > >>> both of these versions of Pd after building and loading a newly-created > >>> external. macOS Catalina 10.15.4. > >> Newly built externals are not blacklisted. > > > > > > I trust you on that, but loading a newly-created external seems to have > > resulted in my previously-blacklisted externals also loading with no > > problem. > > > > In the case of my externals, I would guess that perhaps this might be > > because the new and old all used the same signing certificate? But that > > wouldn't explain my friend???s externals which he compiled. > > > > So perhaps there???s something else going on which I???ve missed, because > > no one else has confirmed this yet : \ > > -------- > Dan Wilcox > @danomatika > <https://urldefense.com/v3/__http://twitter.com/danomatika__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBSbMY6Bq$ > > > danomatika.com > <https://urldefense.com/v3/__http://danomatika.com/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBe_5cL9q$ > > > robotcowboy.com > <https://urldefense.com/v3/__http://robotcowboy.com/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBdFiArOZ$ > > > > > > _______________________________________________ > [email protected] mailing list > UNSUBSCRIBE and account-management -> > https://urldefense.com/v3/__https://lists.puredata.info/listinfo/pd-list__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBSvi_Xgr$ > _______________________________________________ [email protected] mailing list UNSUBSCRIBE and account-management -> https://lists.puredata.info/listinfo/pd-list
