NotarizingMaxAppliactions

There is an informative article on notarizing max apps from cycling74: catalina-support-and-notarization

unfortunately apple obfuscated the process beyond believe with their documentation and their terminology-scheme, so I would like to add here my steps that might help others and maybe find their way into the same article:

after building the app:

inside the terminal:

xattr -cr <path to your app>

removes finder stuff.

codesign -s <TeamID> --options runtime --timestamp --deep --entitlements <path to entitlement file> -f <path to your app>

now test if your codesigning was successfull:

codesign --verify --deep --strict --verbose=2 <path to your app>

in my case I hade some files inside the app that needed to be removed until the verification didn’t show any errors anymore.

then make a dmg (in my case with dropDMG). I can recomend dropDMG, because you also need to codesign the dmg (it seems - at least its working now and I am not testing against this claim anymore), and dropDMG can do this for you. you simply can select the certificate inside the UI.

then notarisation:

first you should create an app-specific password (https://support.apple.com/en-us/HT204397)

then create a keychain - password with an item name like 'APP_PASSWORD'. the account name has to be your AppleID (in my case an email address) and the just created password.

now you can run the following:

xcrun altool --notarize-app -f <path to your dmg> -t osx -u ‘your@appleID' -p "@keychain:APP_PASSWORD" -primary-bundle-id <your bundle id> --asc-provider ‘<your team id>'

especially the -u and —asc-provider is so badly named:

-u is your account name, ie. your AppleID which is NOT displayed inside your developer membership details and it has to match the account name inside the keychain-password. you will find it when you click on the upper left on you name.

—asc-provider is your TeamID (at least in my case)

once you get an email from apple that the notarization has been successfull, you can staple it, zip it, upload it, donwload it, unzip and it works...