Does anyone use signing with JVM macOS with Compos...
# compose-desktop
s
Does anyone use signing with JVM macOS with Compose 1.5.0-beta02? With
sign.set(true)
it takes over 60 minutes until my CI get's a timeout. Without singing the whole process is done in 15 minutes. I separated
desktopJar
into it's own build step to make sure this is not the problem - it completes after 5 minutes. Running locally it works. I assume that codesign may show a dialog for unlocking the keychain or something. That wasn't the case before.
1
m
Apple's timestamping server has got a bit slow lately.
We do signing of CfD apps with Conveyor all the time though, and it does work and doesn't yield 60 minute delays.
s
Conveyor is a paid product. I’m on a budget.
Codesign on CLI seems not to be easy. I signed my app with that, but on notarization it complains that the app is not "hardened" and libsiko/etc. are not signed. 🙄
The process used to work a year ago. Something broke in the meantime.
Okay, I found the problem. I need an
security set-keychain-settings -lut 3600 build.keychain
, because otherwise on CI the keychains locks up before the gradle task gets to sign.