[PD-dev] codesigning externals (was Re: building fluidsynth~)

[Roman Haefeli]

On Wed, 2022-05-04 at 09:48 +0200, IOhannes m zmoelnig wrote:
> 
> On 5/4/22 09:14, Roman Haefeli wrote:
> > On Wed, 2022-05-04 at 08:32 +0200, IOhannes m zmoelnig wrote:
> > > 
> > > 
> > > it *might* be enough to just run "codesign --remove-signature" 
> > > on
> > > the
> > > modified binaries. if you could confirm this, i will update my
> > > localdeps
> > > script.
> > 
> > I modified the script so that it:
> > 
> >    * removes the signatures and re-signs all libs
> >    * added some tweaks so that dependencies end up in a subfolder
> > named
> >      $arch
> > 
> > https://github.com/porres/pd-fluidsynth/blob/main/scripts/localdeps.macos.sh
> > 
> 
> PRs are always welcome.
> 
> however: have you tried to *just* removing the signature, without
> adding 
> an ad-hoc signature?

I did now. This is what I get on Monterey, when instantiating an
unsigned external:

/Users/user/pd-src/workspace/Darwin-arm64-
32/fluidsynth~/fluidsynth~.d_arm64: dlopen(/Users/user/pd-
src/workspace/Darwin-arm64-32/fluidsynth~/fluidsynth~.d_arm64, 0x000A):
tried: '/Users/user/pd-src/workspace/Darwin-arm64-
32/fluidsynth~/fluidsynth~.d_arm64' (code signature in <C7908FF4-42E1-
3F81-BAEB-B49A23869746> '/Users/user/pd-src/workspace/Darwin-arm64-
32/fluidsynth~/fluidsynth~.d_arm64' not valid for use in process:
Trying to load an unsigned library), '/usr/lib/fluidsynth~.d_arm64' (no
such file)
 fluidsynth~ sf2/Famicom
... couldn't create


At least since Monterey, the codesigning seems mandatory.

Roman


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.puredata.info/pipermail/pd-dev/attachments/20220504/a6494023/attachment.sig>