如何解决通过自生成证书进行签名时,macOS程序崩溃,但可以很好地取消签名
我生成了自己的用于测试following these instructions的证书。我使用
签名代码find cmake-build-release/Beertabs.app -name "*.dylib" | xargs -I $ codesign --verify --verbose --sign $1 $
find cmake-build-release/Beertabs.app -name "*.framework" | xargs -I $ codesign --verify --verbose --sign $1 $
codesign --sign $1 --verbose --entitlements Beertabs-Entitlements.plist cmake-build-release/Beertabs.app
其中$ 1是我的密钥名。
尝试运行该程序时,它立即崩溃。控制台在底部显示输出。当我运行codesign -vvvv cmake-build-release/Beertabs.app
验证代码签名时,所有内容均已验证。但是,当我运行spctl --verbose=4 --assess --type execute cmake-build-release/Beertabs.app
时,我得到cmake-build-release/Beertabs.app: rejected
。
该程序可以在没有代码签名的情况下按预期运行,但无法正常运行。我错过了一步吗?应该提到的是,我正在使用Qt库,并使用macdeployqt
工具将库文件捆绑到appbundle中。这是因为我使用的是自签名证书吗?
default 15:48:48.762073-0500 lsd - 45683955: Checking whether application is managed at file:///Users/rwardrup/Projects/Beertabs/cmake-build-release/Beertabs.app/
default 15:48:48.792781-0500 Finder LAUNCHING:0x0-0x27e67e4 Beertabs foreground=1 bringForward=1 seed=8974 userActivityCount=0
default 15:48:48.803196-0500 loginwindow -[ApplicationManager checkInAppContext:eventData:] | ApplicationManager: Checked in app : Beertabs
default 15:48:48.843811-0500 secinitd Beertabs[71467]: root path for bundle "<private>" of main executable "<private>"
default 15:48:48.853615-0500 runningboardd Resolved pid 71467 to [executable<Beertabs(501)>:71467]
default 15:48:48.855505-0500 runningboardd [executable<Beertabs(501)>:71467] This process will not be managed.
default 15:48:48.855541-0500 runningboardd Now tracking process: [executable<Beertabs(501)>:71467]
default 15:48:48.856161-0500 runningboardd Acquiring assertion targeting executable<Beertabs(501)> from originator [daemon<com.apple.coreservices.launchservicesd>:145] with description <RBSAssertionDescriptor; foregroundApp:71467; ID: 307-145-25866; target: 71467> attributes = {
<RBSDomainAttribute: 0x7f81f8521400; domain: com.apple.launchservicesd; name: RoleUserInteractiveNonFocal; sourceEnvironment: 0x0>;
}
default 15:48:48.856360-0500 runningboardd Assertion 307-145-25866 (target:executable<Beertabs(501)>) will be created as active
default 15:48:48.857615-0500 runningboardd Acquiring assertion targeting executable<Beertabs(501)> from originator [daemon<com.apple.coreservices.launchservicesd>:145] with description <RBSAssertionDescriptor; foregroundApp:71467; ID: 307-145-25867; target: 71467> attributes = {
<RBSDomainAttribute: 0x7f81fab493f0; domain: com.apple.launchservicesd; name: RoleUserInteractiveNonFocal; sourceEnvironment: 0x0>;
}
default 15:48:48.858001-0500 runningboardd [executable<Beertabs(501)>:71467] Ignoring jetsam update because this process is not memory-managed
default 15:48:48.857958-0500 runningboardd Assertion 307-145-25867 (target:executable<Beertabs(501)>) will be created as active
default 15:48:48.858454-0500 runningboardd [executable<Beertabs(501)>:71467] Ignoring resume because this process is not lifecycle managed
default 15:48:48.858603-0500 runningboardd Finished acquiring assertion 307-145-25866 (target:executable<Beertabs(501)>)
default 15:48:48.858815-0500 runningboardd [executable<Beertabs(501)>:71467] Set darwin role to: UserInteractiveNonFocal
default 15:48:48.859493-0500 runningboardd [executable<Beertabs(501)>:71467] Ignoring GPU update because this process is not GPU managed
default 15:48:48.859719-0500 runningboardd Finished acquiring assertion 307-145-25867 (target:executable<Beertabs(501)>)
default 15:48:48.859733-0500 runningboardd Invalidating assertion 307-145-25866 (target:executable<Beertabs(501)>) from originator 145
default 15:48:48.909969-0500 secinitd Beertabs[71467]: root path for bundle "<private>" of main executable "<private>"
default 15:48:50.002388-0500 secinitd Beertabs[71467]: root path for bundle "<private>" of main executable "<private>"
default 15:48:51.097233-0500 secinitd Beertabs[71467]: root path for bundle "<private>" of main executable "<private>"
default 15:48:52.184767-0500 secinitd Beertabs[71467]: root path for bundle "<private>" of main executable "<private>"
default 15:48:52.222575-0500 runningboardd [executable<Beertabs(501)>:71467] Death sentinel fired!
default 15:48:52.222934-0500 ReportCrash Parsing corpse data for process Beertabs [pid 71467]
default 15:48:52.228765-0500 runningboardd Invalidating assertion 307-145-25867 (target:executable<Beertabs(501)>) from originator 145
default 15:48:52.330990-0500 runningboardd Removing process: [executable<Beertabs(501)>:71467]
default 15:48:52.339950-0500 runningboardd Removing assertions for terminated process: [executable<Beertabs(501)>:71467]
default 15:48:54.130670-0500 ReportCrash Sending event: com.apple.stability.crash {"appVersion":"???","bundleID":"","exceptionType":2,"process":"Beertabs","responsibleApp":"Beertabs"}
default 15:48:54.130903-0500 analyticsd Received event: com.apple.stability.crash {"appVersion":"???","responsibleApp":"Beertabs"}
default 15:48:54.131016-0500 analyticsd Aggregated. Transform: StabilityCrashNumerator3 Dirty: 6 Event: com.apple.stability.crash {"appVersion":"???","responsibleApp":"Beertabs","timestamp":1600289334130405}
default 15:48:54.131108-0500 analyticsd Aggregated. Transform: StabilityCrashNumerator3WithIncidentID Dirty: 6 Event: com.apple.stability.crash {"appVersion":"???","timestamp":1600289334130405}
default 15:48:54.174021-0500 ReportCrash Saved crash report for Beertabs[71467] version ??? (???) to Beertabs_2020-09-16-154854_Rivendell.crash
default 15:48:54.205327-0500 ReportCrash Removing excessive log: Beertabs_2020-09-16-154854_Rivendell.crash
解决方法
问题是因为Info.plist文件不正确。将以下内容添加到cmakelists即可对其进行修复。
set_target_properties(Foo PROPERTIES
MACOSX_BUNDLE_BUNDLE_NAME "AppName"
MACOSX_BUNDLE TRUE
MACOSX_BUNDLE_ICON_FILE icon_name.icns
MACOSX_BUNDLE_LONG_VERSION_STRING 0.8.0
MACOSX_BUNDLE_SHORT_VERSION_STRING 0.8.0
MACOSX_BUNDLE_GUI_IDENTIFIER com.mycompany.appname
XCODE_ATTRIBUTE_LD_RUNPATH_SEARCH_PATHS "@loader_path/Libraries"
XCODE_ATTRIBUTE_ENABLE_HARDENED_RUNTIME TRUE
XCODE_ATTRIBUTE_EXECUTABLE_NAME "appname")
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。