Re: [Pyobjc-dev] py2app builds fail leopard codesign integrity checks

[Ronald O. <ron...@ma...>]

On 19 Nov, 2007, at 20:14, James R Eagan wrote:

> On Nov 18, 2007, at 20:22 , Bill Bumgarner wrote:
>
>> Might it be that py2app is copying, then stripping, the  
>> keychain.framework?
>
>
> The Keychain framework is a symptom, not the cause.  Upon further  
> digging, it appears that all py2app applications built under Leopard  
> have extraneous code signatures, regardless of whether they include  
> a framework or not.  Using another example that does not use any  
> external frameworks, when I run codesign on it to check its  
> validity, it again claims to be modified:
>
> % codesign -dvvv CocoaRegexMaker.app
> CocoaRegexMaker.app: code or signature modified
>
> When I check the integrity of my application built by Xcode, I get a  
> different result:
> % codesign -dvvv Login\ Authenticator.app
> Login Authenticator.app: code object is not signed
>
> (and, for completeness, when checking Login\ Authenticator.app as  
> built by py2app):
> % codesign -dvvv Login\ Authenticator.app
> Login Authenticator.app: code or signature modified
>
>
> It appears that Xcode is never signing the code (which makes sense  
> -- I've never specified my certificate anywhere).  Something that  
> py2app does, however, appears to make Leopard think the resulting  
> application has been signed.  I'm not deeply familiar enough with  
> Leopard's codesigning, however, to be able to tell where this  
> extraneous signature is coming from.  (I'm assuming that py2app is  
> not implicitly signing the code somewhere with a hidden certificate,  
> since that would be pretty whack.)

Py2app isn't signing code. The problem is that the py2app executable  
stub inside the py2app package is signed by Apple (it isn't signed in  
the repository).

I don't know how to remove that signature, but you can download the  
stub executable from pyobjc's repository (downloading from https://svn.red-bean.com/pyobjc/branches/pyobjc2/py2app/py2app/apptemplate/prebuilt/main 
  might work for that)

Ronald

>
>
> --------
> setup.py (from CocoaRegexMaker)
> --------
>
> from distutils.core import setup
> import py2app
>
> setup(
>    app=['CocoaRegexMaker.py'],
>    data_files=['MainMenu.nib'],
> )
>
>
> --
> That's the trouble with computers -- always thinking in black and  
> white.
> No aquamarines, no blues, no imagination.
>                    -- The (Fourth) Doctor
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_______________________________________________
> Pyobjc-dev mailing list
> Pyo...@li...
> https://lists.sourceforge.net/lists/listinfo/pyobjc-dev