Re: New Notarization Issues

[Keisuke Miyako via 4D_Tech]

code signature can easily get invalidated if the app or plugin was not packaged 
and distributed correctly.
for example, if you simply sign, zip and upload a file to a public server,
a downloaded copy would most probably be thrown to the bin.

the developer should sign, archive (pkg, zip, dmg), notarise, and staple the 
app or plugin before distribution.
also a plugin created for v17 R6 or earlier has manifest.json in a 
non-conventional location, which may get rejected by Catalina 10.15.3.

On Feb 12, 2020, at 13:18, Chuck Miller via 4D_Tech 
<4d_tech@lists.4d.com> wrote:
Slightly related. Any idea why I have a plug-in that is signed but shows as 
damaged on Catalina but not in windows. I am not sure of other Mac OS versions.

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[John DeSoi via 4D_Tech]

Hi Tim,

Do you mean there is currently a way to use an offscreen web area (without 
creating an invisible form process), or is this something just happening 
internally?

That would be really nice to have in order to take advantage of Javascript 
libraries.

Thanks,

John DeSoi, Ph.D.


> On Feb 12, 2020, at 10:35 AM, Timothy Penner via 4D_Tech 
> <4d_tech@lists.4d.com> wrote:
> 
> I have been informed that 4D is using the web area in more and more parts 
> internally, and with the offscreen web area allowing to execute JavaScript 
> this might increase.

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[Cannon Smith via 4D_Tech]

Hi Miyako,

I have all my applications except one notarizing again since Apple’s recent 
changes. I appreciate you updating the  cURL FTP and System Notification 
plugins.

The application that isn’t notarizing has some other plugins that I’m hoping 
can be updated by their authors. I’m not sure what to tell them needs to be 
changed, though. Would you have time to explain what changes are necessary to 
make plugins notarizable now?

Thanks so much.

--
Cannon Smith
Synergy Farm Solutions Inc.



> On Feb 11, 2020, at 9:00 PM, Keisuke Miyako via 4D_Tech 
> <4d_tech@lists.4d.com> wrote:
> 
> very curious to know if 3.9.v18 is successfully signed with the official 
> shell script.

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[James Crate via 4D_Tech]

On Feb 12, 2020, at 11:35 AM, Timothy Penner via 4D_Tech <4d_tech@lists.4d.com> 
wrote:
> 
> James et all, 
> 
> Please disregard my response from yesterday regarding removing the 
> WebViewerCEF.bundle as this was bad advice on my part!
> 
> I have been informed that 4D is using the web area in more and more parts 
> internally, and with the offscreen web area allowing to execute JavaScript 
> this might increase.
> 
> The bottom line is that as of today 4D is not designed to work in a modular 
> base, where a customer can remove unwanted parts without impacting the total 
> application.
> 
> Sorry for the misguidance!

It’s useful to know what that component is for, since it doubles the size of 
the app. The system-based web areas I have in the app functioned with it 
removed, so I thought it might be an old legacy item. 

Jim

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[Cannon Smith via 4D_Tech]

Hi Miyako,

I just tried and 3.9.v18 is successfully signed with the official shell script. 
Thank you for the changes!

I now have one application successfully notarizing again. Now I need to check 
my other applications to make sure they will still notarize. :-)

--
Cannon Smith
Synergy Farm Solutions Inc.



> On Feb 11, 2020, at 9:00 PM, Keisuke Miyako via 4D_Tech 
> <4d_tech@lists.4d.com> wrote:
> 
> very curious to know if 3.9.v18 is successfully signed with the official 
> shell script.

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[Cannon Smith via 4D_Tech]

Hi Jim,

Thanks. I’m now using the v18 Internet Commands and it is notarization 
correctly.

--
Cannon Smith
Synergy Farm Solutions Inc.



> On Feb 11, 2020, at 5:40 PM, James Crate via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> I didn’t verify that the v18 4DIC is on a newer SDK, I replaced a copy of the 
> plugin but the one from inside the 4D.app was being copied, so I ended up 
> with the same error because it was the same v17 4DIC. The PostgreSQL plugin 
> from Pluggers.nl is also on an old SDK, since it won’t notarize either I 
> didn’t try again.
> 
> I don’t see any reason the SignApp.sh script would skip the cURL plugin, 
> since it ends with .bundle it should be processed. You might want to add an 
> echo in the SignFile() function to print a list of all files it signs. Does 
> the plugin include a curl binary? Maybe it’s not in a location codesign 
> expects to find binaries and the error is misleading?

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

RE: New Notarization Issues

[Timothy Penner via 4D_Tech]

James et all, 

Please disregard my response from yesterday regarding removing the 
WebViewerCEF.bundle as this was bad advice on my part!

I have been informed that 4D is using the web area in more and more parts 
internally, and with the offscreen web area allowing to execute JavaScript this 
might increase.

The bottom line is that as of today 4D is not designed to work in a modular 
base, where a customer can remove unwanted parts without impacting the total 
application.

Sorry for the misguidance!

-Tim



-Original Message-
From: 4D_Tech <4d_tech-boun...@lists.4d.com> On Behalf Of James Crate via 
4D_Tech
Sent: Tuesday, February 11, 2020 1:26 PM
To: 4D iNug Technical <4d_tech@lists.4d.com>
Cc: James Crate 
Subject: Re: New Notarization Issues

On Feb 11, 2020, at 2:58 PM, Timothy Penner via 4D_Tech <4d_tech@lists.4d.com> 
wrote:
> 
> Regarding this:
>> However, after building I remove the “Contents/Native 
>> Components/WebViewerCEF.bundle”, which is an apparently unused 275MB 
>> package, so if I wanted to use the built-in signing, I’d have to accept the 
>> extra 275MB on my app size.
> 
> True, if you modify the application package AFTER signing then the signature 
> becomes invalid.
> 
> However, you could modify the source package PRIOR to running the build 
> application command, by removing the “Contents/Native 
> Components/WebViewerCEF.bundle" file from the 4D Volume Desktop.app and 4D 
> Server.app packages...  In this way, when the BUILD APPLICATION command 
> merges the applications together the WebViewerCEF.bundle is already removed 
> before the built-in signing operation takes place.

I thought about that. If I have to mess around with the code signing script 
again I’ll probably switch to just doing that. I’m already running the BUILD 
APPLICATION command with a custom project xml file which I update with the 
version, so I could pretty easily update that to use a customized 4D Volume 
Desktop.app.

Jim Crate

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[Keisuke Miyako via 4D_Tech]

if it works, then that's fine,
but maybe there is a difference between Catalina 10.15.1 and 10.15.3.
at least that has been my experience.

On Feb 12, 2020, at 22:25, James Crate via 4D_Tech 
<4d_tech@lists.4d.com> wrote:
plugin has manifest.json under Contents (old-style), and there are no 
notarization errors for this plugin once it is properly signed.

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: New Notarization Issues

[James Crate via 4D_Tech]

On Feb 11, 2020, at 11:00 PM, Keisuke Miyako via 4D_Tech <4d_tech@lists.4d.com> 
wrote:
> 
> I am not 100% sure, but it might be because plugins that support v17 (up to 
> R6) or earlier
> have their manifest.json file under Contents, where the code sign CLI might 
> fail to find it.
> 
> v18 plugins have moved the location to Contents/Resources,
> but then, the plugin is no longer compatible with v17.

I don’t think this is a problem. The v17.3 HF3 build of 4D Internet Commands 
has the manifest.json file under Contents/Resources, as does the v18 4D IC 
plugin. Both work on V17.3 HF3. The XLS plugin has manifest.json under Contents 
(old-style), and there are no notarization errors for this plugin once it is 
properly signed.

I haven’t tested v18 yet to see whether the current XLS plugin (with 
manifest.json in Contents) works, but that seems like something not worth 
making a breaking change.

Jim Crate

**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

RE: Entity Selection Listbox with Image

[Bob Miller via 4D_Tech]

Doug,

RE> We have been working on moving our generic listing over to using ORDA

I don't have any knowledge of the picture field issue; I’m very interested in 
your approach to creating the generic listing.  Have you found a demo somewhere 
that shows how to do this?  I'm just opening the book on ORDA and this is one 
of the first projects I'd like to try, but am befuddled where to start.

What are the features of your generic listing?  What does it look like?  Can 
you share a bit about your spec and how you are going about creating this?

Many thanks, that would be a great kick start for me.

Bob Miller
Parker Hannifin Corp.
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Entity Selection Listbox with Image

[Douglas Cryer via 4D_Tech]

Hi Folks,

We have been working on moving our generic listing over to using ORDA.  To do 
this we realise that we would need to use entity selections with list boxes.

This has gone really well but we have now hit a very road bump and I need some 
advice on how to overcome it.

Two of our tables have picture fields containing thumbnails that can be added 
to a listing view.  In classic list box using selection this works really well 
to display the thumbnail so the user knows visually what the line is.  The data 
loads quickly and scrolls smoothly.  However, when a picture is put into a list 
box with an entity selection it appears to kill performance.  
- The data takes ages to load (15 seconds with 4K records) even when all 
picture fields are empty!
- The scroll is jerky and makes the view unusable.

I feel I must be missing something.  Is there some new trick to displaying 
pictures in list boxes that are using entity selections.

We are using the new v18 LTS release so I am concerned that our dreams of an 
ORDA future have just been put on hold.

Regards,  Dougie


telekinetix Limited- J. Douglas Cryer
Phone : 01234 761759  Mobile : 07973 675 218
2nd Floor Broadway House, 4-6 The Broadway, Bedford MK40 2TE
Email : jdcr...@telekinetix.com  Web : http://www.telekinetix.com 


 




**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**