Re: [cdt-dev] eclipse rcp mac os app signing

[Aleksandar Kurtakov <akurtako@xxxxxxxxxx>]

On Tue, Sep 28, 2021 at 5:57 PM Jonah Graham <jonah@xxxxxxxxxxxxxxxx> wrote:

Hi Kondal,

If you need to sign the app, you need to do it with your own signature. The default URL ( https://cbi.eclipse.org/macos/codesign/sign ) is only accessible within the Eclipse network and can only be used by Eclipse projects to sign their own output. The whole plug-in ( eclipse-macsigner-plugin ) is actually only supported for use within the Eclipse network AFAIK.

CBI plugins (incl. macsigner) are designed to be usable with other signers (although I'm not aware of anyone doing it). You should be able to point to your own signer by passing -Dcbi.macsigner.signerUrl=YOUR_SIGNER_URL to your maven call. See https://www.eclipse.org/cbi/sitedocs/eclipse-macsigner-plugin/sign-mojo.html for details. In case of issues with using the plugin that way please contact the cbi project https://projects.eclipse.org/projects/technology.cbi/contact .

 

Unfortunately helping with this problem is out of scope for cdt-dev mailing list.

HTH,

Jonah

~~~
Jonah Graham
Kichwa Coders
www.kichwacoders.com

On Tue, 28 Sept 2021 at 10:50, Kondal Kolipaka <kondal.kolipaka@xxxxxxxxx> wrote:

Hello All,

I am trying to app sign eclipse RCP using "eclipse-macsigner-plugin".  However, this is getting failed due to https://cbi.eclipse.org/macos/codesign/sign is not accessible.

Is there any alternative code signing service for this or any other approach I could get this done? 

The reason why I wanted to do app signing rcp is - I was unable to launch generated rcp .app file. It shows an error message "... app is damaged and can't be opened. You should move to the bin". 

Here is the error log from the build:

[DEBUG] Will send HTTP request HttpRequest{serverUri=https://cbi.eclipse.org/macos/codesign/sign, file=@/Users/kondal/test/idf-eclipse-plugin/releng/com.espressif.idf.product/target/products/com.espressif.idf.product/macosx/cocoa/x86_64/Espressif-IDE.app_11497988771108018981.zip, entitlements=@/Users/kondal/esp/idf-eclipse-plugin/releng/com.espressif.idf.product/macos/product.entitlements}

[DEBUG] HTTP request configuration is Config{connectTimeout=PT5S, readTimeout=PT0S, timeout=PT5M}

[DEBUG] HTTP request and response handled in 3.969 ms

[WARNING] An exception has been thrown, but the request will be retried (attempt 2 / 3)

java.net.UnknownHostException: cbi.eclipse.org: nodename nor servname provided, or not known

    at java.net.Inet6AddressImpl.lookupAllHostAddr (Native Method)

Here is the pom script:

<plugin>

<groupId>org.eclipse.cbi.maven.plugins</groupId>

<artifactId>eclipse-macsigner-plugin</artifactId>

<version>1.3.2</version>

<executions>

<execution>

<goals>

<goal>sign</goal>

</goals>

<phase>package</phase>

<configuration>

<signFiles>

<signFile>${project.build.directory}/products/${productId}/macosx/cocoa/x86_64/${rootFolder}.app</signFile>

</signFiles>

<timeoutMillis>300000</timeoutMillis>

<continueOnFail>${macSigner.forceContinue}</continueOnFail>

<entitlements>${project.basedir}/macos/product.entitlements</entitlements>

</configuration>

</execution>

</executions>

</plugin>

Thank you all.

_______________________________________________
cdt-dev mailing list
cdt-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/cdt-dev

_______________________________________________
cdt-dev mailing list
cdt-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/cdt-dev

--

Aleksandar Kurtakov

Red Hat Eclipse Team