Opened 3 years ago

Last modified 2 years ago

#7234 closed defect

Apple notarization altool command will be discontinued Fall 2023 — at Version 7

Reported by: Tom Goddard Owned by: Tom Goddard
Priority: moderate Milestone: 1.7
Component: Build System Version:
Keywords: Cc: chimerax-programmers
Blocked By: Blocking:
Notify when closed: Platform: all
Project: ChimeraX

Description (last modified by Eric Pettersen)

A command that the ChimeraX Mac notarization script uses to notarize the app is deprecated and will no longer be available in Fall 2023.
We will need to find out the new way of doing notarization and use it.

	<key>warnings</key>
	<array>
		<dict>
			<key>code</key>
			<integer>-1030</integer>
			<key>message</key>
			<string>altool has been deprecated and, starting in fall 2023, will no longer be supported by the Apple notary service. You should start using notarytool to notarize your software.</string>
			<key>userInfo</key>
			<dict>
				<key>NSLocalizedDescription</key>
				<string>altool has been deprecated and, starting in fall 2023, will no longer be supported by the Apple notary service. You should start using notarytool to notarize your software.</string>
			</dict>
		</dict>
	</array>

Change History (7)

comment:1 by Tom Goddard, 3 years ago

Not sure who is taking over Conrad's Mac notarization script, so I assigned to Eric. But could be me or Zach or Greg. We can discuss in developer meeting.

comment:2 by Tom Goddard, 3 years ago

The warning message says the replacement for the altool command is notarytool.

comment:3 by Zach Pearson, 3 years ago

Need to find out which folders require notarization and which do not. For example, Foo/Contents/MacOS requires notarization but Foo/Contents/Resources does not.

in reply to:  4 ; comment:4 by goddard@…, 3 years ago

Conrad's script that automates the notarization is build_tools/macosx_package/notarize.py in the build_tools git repository.  It traverses the application directory structure to figure out what to notarize.  The current script is 515 lines.  Another notarization problem is ticket #7209 where we do not get timestamps from Apple's  server most likely due to UCSF firewall issues.

comment:5 by Eric Pettersen, 3 years ago

Owner: changed from Eric Pettersen to Tom Goddard

comment:6 by Tom Goddard, 3 years ago

Milestone: 1.7
Type: enhancementdefect

comment:7 by Eric Pettersen, 3 years ago

Description: modified (diff)

email from Apple:

Hello RBVI,

We’re reaching out because you recently used the altool command-line utility to notarize your macOS software with Apple. As announced last year at WWDC22, if you’re still using altool with the Apple notary service, you should transition to the notarytool command-line utility as soon as possible. Notarizing software with altool was deprecated in Xcode 13, and the Apple notary service will no longer accept uploads from altool as of November 1, 2023. Existing notarized software will continue to function properly.

For information on notarizing your apps, read TechNote TN3147: Migrating to the latest notarization tool.

If you have any questions, contact us.

Apple Developer Relations

Note: See TracTickets for help on using tickets.