<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I just discovered the huge headache of the notarization system under Catalina: the OS will prevent loading of every non-notarized *external* that you try to load. This appears to be a 3-part ordeal per external:<div class=""><br class=""></div><div class="">macOS’ first message is thrown the first time you open a patch with a non-notarized external:</div><div class=""><br class=""></div><div class=""> “myexternal~.pd_darwin” cannot be opened because the developer cannot be verified. macOS cannot verify that this app is free from malware.<br class=""><div class=""><br class=""><div>The buttons accompanying this message are Move to Trash (!) and Cancel.</div><div><br class=""></div><div>There are probably other ways, but to fix this, I had to go to System Preferences > Security & Privacy and click the button that allows authorization for the last binary that was prevented from launching.</div><div><br class=""></div><div>I then had to quit and restart Pd. Opening a patch containing the offending external, I’m greeted with an error message similar to the first:</div><div><br class=""></div><div> macOS cannot verify the developer of “myexternal~.pd_darwin”. Are you sure you want to open it? By opening this app, you will be overriding system security which can expose your computer and personal information to malware that may harm your Mac or compromise your privacy.</div><div><br class=""></div><div>You get Move to Trash, Open, and Cancel buttons this time. If you say Open, your external is allowed to load from this point on. But note that you have to do this 3-step process for every external, and only at the time that they’re first loaded, meaning we’re going to have to go through this whenever we first load up some old patch with a (64-bit) external we haven’t used in a while : \</div><div><br class=""></div><div>Kevin</div><div><br class=""></div><div><br class=""><blockquote type="cite" class=""><div class="">On Oct 8, 2019, at 2:45 AM, Dan Wilcox <<a href="mailto:danomatika@gmail.com" class="">danomatika@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Howdy all,<div class=""><br class=""></div><div class="">The newest version of macOS, 10.15 "Catalina", is out and with it comes a new "Notarization" requirement for applications, etc:</div><div class=""><br class=""></div><div class=""><a href="https://developer.apple.com/documentation/xcode/notarizing_your_app_before_distribution?language=objc" class="">https://developer.apple.com/documentation/xcode/notarizing_your_app_before_distribution?language=objc</a></div><div class=""><br class=""></div><div class="">As far as I can tell, applications do not need to be built via Xcode, but need to be screened and Notarized by Apple. I'm not 100% certain if this applies only to applications signed by a Developer ID or for *all* applications. Regardless of whether we approve of this security step or not (I don't), the practical matter is that Pd *may* suddenly not run for users on 10.15 as it is not notarized or signed. OTOH software that is not signed and is installed "from the wild" *may* still be launched via Right Click -> Open on first run... although I'm not sure.</div><div class=""><br class=""></div><div class="">Apple has made the Notarization requirement optional until January 2020 to ease the transition.</div><div class=""><br class=""></div><div class="">At this point, it would be helpful to hear from someone who has the new OS if Pd runs and if there are any warning dialogs.</div><div class=""><br class=""></div><div class="">In the worst case, we will need an Apple developer account ($100 a year) to signed Pd for distribution and notarization. This also requires using the Xcode 10+ developer tools which rules out Miller's 10.6 build system for this step. it could be integrated as a makefile step. I have a dev account and can do some testing, when needed.</div><div class=""><br class=""></div><div class="">In the best case, Right Click -> Open on first run still works. :)</div><div class=""><br class=""></div><div class=""><div class="">
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">--------</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Dan Wilcox</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://twitter.com/danomatika" class="">@danomatika</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://danomatika.com/" class="">danomatika.com</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://robotcowboy.com/" class="">robotcowboy.com</a></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></div></div>_______________________________________________<br class="">Pd-dev mailing list<br class=""><a href="mailto:Pd-dev@lists.iem.at" class="">Pd-dev@lists.iem.at</a><br class="">https://lists.puredata.info/listinfo/pd-dev<br class=""></div></blockquote></div><br class=""></div></div></body></html>