[PD] [PD-announce] pd 0.51-0test2 for Macontosh - another try at code signing

[Miller Puckette]

So I _think_ things are working now, although I'm starting to wonder how
they're working, give that I think Catalina is insisting that all apps
run in "hardened" mode (perhaps I'm wrong on this), and that there's simply
no way for a hardened app to load a library that has a "target" < 10.9.  The
fact that libraries are loading at all makes me think that 0.51-0 test 2
is OK as far as signing goes.

But then I wonder how pre-10.9 externs (libraries) can ever work at all
under Catalina.  I'm not even feeling sure that the ones in pd/extra should
work: I think their target is 10.7 (I compiled them on a 10.7 machine) -
but perhaps they work anyway as having fallen under the app when the
app itself was signed.

I'm willing to get hold of a newer machine somehow if that proves necessary
(and someday I'm sure it will) but want to put that off as long as I can,
since each year seems to bring more ways Apple can shaft us.

M

On Sat, May 30, 2020 at 11:54:44PM +0200, Dan Wilcox wrote:
> Back to the original discussion from pd-dev, looking at this:
> 
> https://urldefense.com/v3/__https://cutecoder.org/programming/shared-framework-hardened-runtime/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBXWOX-gk$  <https://urldefense.com/v3/__https://cutecoder.org/programming/shared-framework-hardened-runtime/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBXWOX-gk$ >
> 
> If the externals (aka dynamic libs) are built with a macOS deployment target >= 10.9, then they should work without throwing an error. If they are not or are simply older with an older deployment target, they will run into the loading issue. I had added adhoc code-signing and the disable-library-validation exception entitlement to the app build process, so that should make this work, or at least I thought it would.
> 
> > On May 30, 2020, at 11:39 PM, pd-list-request at lists.iem.at wrote:
> > 
> > Date: Sat, 30 May 2020 14:36:21 -0700
> > From: Kevin Haywood <khaywood at ucsd.edu <mailto:khaywood at ucsd.edu>>
> > To: Christof Ressi <info at christofressi.com <mailto:info at christofressi.com>>
> > Cc: Pd-List <pd-list at lists.iem.at <mailto:pd-list at lists.iem.at>>
> > Subject: Re: [PD] [PD-announce] pd 0.51-0test2 for Macontosh - another
> > 	try at code signing
> > Message-ID: <59E927A8-BC97-450A-8287-19BACEE2EA99 at ucsd.edu <mailto:59E927A8-BC97-450A-8287-19BACEE2EA99 at ucsd.edu>>
> > Content-Type: text/plain; charset="utf-8"
> > 
> > 
> >> On May 30, 2020, at 1:46 PM, Christof Ressi <info at christofressi.com <mailto:info at christofressi.com>> wrote:
> >> 
> >>> For some still-inexplicable reason, my externals started working again in both of these versions of Pd after building and loading a newly-created external. macOS Catalina 10.15.4.
> >> Newly built externals are not blacklisted.
> > 
> > 
> > I trust you on that, but loading a newly-created external seems to have resulted in my previously-blacklisted externals also loading with no problem.
> > 
> > In the case of my externals, I would guess that perhaps this might be because the new and old all used the same signing certificate? But that wouldn't explain my friend???s externals which he compiled.
> > 
> > So perhaps there???s something else going on which I???ve missed, because no one else has confirmed this yet : \
> 
> --------
> Dan Wilcox
> @danomatika <https://urldefense.com/v3/__http://twitter.com/danomatika__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBSbMY6Bq$ >
> danomatika.com <https://urldefense.com/v3/__http://danomatika.com/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBe_5cL9q$ >
> robotcowboy.com <https://urldefense.com/v3/__http://robotcowboy.com/__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBdFiArOZ$ >
> 
> 
> 

> _______________________________________________
> Pd-list at lists.iem.at mailing list
> UNSUBSCRIBE and account-management -> https://urldefense.com/v3/__https://lists.puredata.info/listinfo/pd-list__;!!Mih3wA!UkW9ByonJFt_VQbWzII3ipcJ_1J5DasZfez99gWyMlghQv5IW3pJBSvi_Xgr$