I try to notarize my macOS application. I’ve done `codesign -dvv --force --timestamp --sign ***` for...

# kotlin-native

[aleksey.tomin]

I try to notarize my macOS application.
I’ve done codesign -dvv --force --timestamp --sign *** for all dylib’s and my kexe with a Mac App Distribution certificate
Next I’ve signed productsign --sign and codesign -dvv --force --timestamp --sign with a Mac Installer Distribution certificate
And the last: xcrun altool --notarize-app --primary-bundle-id "ID" - AppID configuration.
After this in the log I see

{
      "severity": "error",
      "code": null,
      "path": "MY.pkg xpoint-sdk.kexe",
      "message": "The binary is not signed with a valid Developer ID certificate.",
      "docUrl": null,
      "architecture": "x86_64"
    },
   {
      "severity": "error",
      "code": null,
      "path": "MY.pkg .../xpoint-sdk.kexe",
      "message": "The executable does not have the hardened runtime enabled.",
      "docUrl": null,
      "architecture": "x86_64"
    }
...
   {
      "severity": "error",
      "code": null,
      "path": "MY.pkg .../some.dylib",
      "message": "The binary is not signed with a valid Developer ID certificate.",
      "docUrl": null,
      "architecture": "x86_64"
    }

How can I fix it?

[olonho]

See https://github.com/JetBrains/compose-jb/tree/master/tutorials/Signing_and_notarization_on_macOS, while somewhat Compose-biased, shall help.

[aleksey.tomin]

I’ve read this. But now I don’t use the plugin. I will try to use this…

[aleksey.tomin]

@olonho I’ve done notarize for DMG.
But how can I notarize PKG?

[olonho]

Similar tasks but with Pkg suffix, IIRC.

[aleksey.tomin]

I look at source code and can’t understand how it works.
What code uses for this?