From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#49271: 28.0.50: native-comp: Signing macOS self-contained .app bundle fails due to new *.eln location Date: Wed, 30 Jun 2021 15:20:41 +0300 Message-ID: <83zgv7mtly.fsf@gnu.org> References: Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="39067"; mail-complaints-to="usenet@ciao.gmane.io" Cc: alan@idiocy.org, contact@jimeh.me, 49271@debbugs.gnu.org To: Jim Myhrberg Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Wed Jun 30 14:21:08 2021 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lyZDI-0009y6-FN for geb-bug-gnu-emacs@m.gmane-mx.org; Wed, 30 Jun 2021 14:21:08 +0200 Original-Received: from localhost ([::1]:37862 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lyZDH-0004bG-Hg for geb-bug-gnu-emacs@m.gmane-mx.org; Wed, 30 Jun 2021 08:21:07 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:44256) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lyZDC-0004ae-0K for bug-gnu-emacs@gnu.org; Wed, 30 Jun 2021 08:21:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:45116) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lyZDB-0005Mj-NS for bug-gnu-emacs@gnu.org; Wed, 30 Jun 2021 08:21:01 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lyZDB-00069r-Kp for bug-gnu-emacs@gnu.org; Wed, 30 Jun 2021 08:21:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 30 Jun 2021 12:21:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49271 X-GNU-PR-Package: emacs Original-Received: via spool by 49271-submit@debbugs.gnu.org id=B49271.162505564523622 (code B ref 49271); Wed, 30 Jun 2021 12:21:01 +0000 Original-Received: (at 49271) by debbugs.gnu.org; 30 Jun 2021 12:20:45 +0000 Original-Received: from localhost ([127.0.0.1]:56662 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyZCv-00068w-8v for submit@debbugs.gnu.org; Wed, 30 Jun 2021 08:20:45 -0400 Original-Received: from eggs.gnu.org ([209.51.188.92]:46388) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lyZCu-00068l-3Q for 49271@debbugs.gnu.org; Wed, 30 Jun 2021 08:20:44 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:36426) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lyZCn-00055L-RC; Wed, 30 Jun 2021 08:20:38 -0400 Original-Received: from 84.94.185.95.cable.012.net.il ([84.94.185.95]:3281 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lyZCn-0005KW-Fz; Wed, 30 Jun 2021 08:20:37 -0400 In-Reply-To: (message from Jim Myhrberg on Wed, 30 Jun 2021 11:04:43 +0100) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:209157 Archived-At: > From: Jim Myhrberg > Date: Wed, 30 Jun 2021 11:04:43 +0100 > > I've just tried "Contents/lib", and it allowed me to sign and notarize > the .app bundle. And combined with your patch from bug#49270, all > bundled *.eln files are also correctly located and loaded :) > > I did a bit of searching myself for alternatives and found > "Contents/PlugIns" as a potentially suitable place, but a quick test > revealed codesign fails the same way with it as it does with > Contents/MacOS. > > Personally I think Contents/lib is probably fine, as both codesign and > Apple's notarization process are happy with it. And the notarization > process seems very picky. For example, when *.eln files were in > Resources/native-lisp, my initial notarization attempts failed because > it considered the *.eln files to be binaries, and they had not been > signed by codesign despite the --deep flag being used. Hence I'm > individually signing all the *.eln files before signing the app bundle > itself to get the app through notarization. The *.eln files are shared libraries. What is the canonical place to install shared libraries specific to an application?