[Interest] Fw: Aw: Re: codesign issue with Qt6.9.1

[Hamish Moffatt]

On 3/10/25 06:23, alexander_carot--- via Interest wrote:
> Hi all,
> see subject – with Qt6.9.1 now I sign this way:
> *macdeployqt my.app -codesign="myAccount"*
> and then
> **
> *codesign --options=runtime --entitlements 
> ./deployment/entitlements.xml —force ./my.app -s "myAccount"*
> checking this via
> *codesign --verify --deep --strict --verbose=2 ./myApp.app*
> it says "valid on disc" - so all is fine.
> However, now a new issue comes up: When I zip it and load it up to 
> notarise it via:
> *xcrun notarytool submit myApp.zip --keychain-profile MYKEYCHAIN --wait*
> then it eventually fails with:
> *status: invalid *


Do you need to add -hardened-runtime to macdeployqt? It seems to be 
equivalent to --options=runtime.

There is also -sign-for-notarization=<ident>. I'm not sure of the use of 
this.


Hamish
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20251003/d320eb72/attachment.htm>