MacOS dmg文件install4j v10.0.9公证

Question

我们首次对我们的应用程序 (.dmg) 进行公证。我们将 install4j 升级到版本 10.0.9 以符合 notarytool。我有有效的开发者 ID 和证书来共同设计和公证应用程序。但是，公证失败，日志如下。

{
  "logFormatVersion": 1,
  "jobId": "1c59a34c-a2b3-4dc1-8980-43877411b97d",
  "status": "Invalid",
  "statusSummary": "Archive contains critical validation errors",
  "statusCode": 4000,
  "archiveFilename": "pipes_installer.dmg",
  "uploadDate": "2024-11-13T18:05:08.938Z",
  "sha256": "11c2189082f0a0785f186065358483e92babcc45668fa735d529a6dd190a1be7",
  "ticketContents": null,
  "issues": [
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/libtospdif_plugin.dylib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/libtospdif_plugin.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/libddummy_plugin.dylib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/libddummy_plugin.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/libtaglib_plugin.dylib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/libtaglib_plugin.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/liblibass_plugin.dylib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/libvlc_mac.jar/plugins/liblibass_plugin.dylib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    }, .........
.
.
.
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/native-sso.jar/sso/mac.zip/Contents/MacOS/nppipes",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "i386"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/native-sso.jar/sso/mac.zip/Contents/MacOS/nppipes",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "i386"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/native-sso.jar/sso/mac.zip/Contents/MacOS/nppipes",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/native-sso.jar/sso/mac.zip/Contents/MacOS/nppipes",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/jna-5.7.0.jar/com/sun/jna/darwin/libjnidispatch.jnilib",
      "message": "The binary is not signed.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/jna-5.7.0.jar/com/sun/jna/darwin/libjnidispatch.jnilib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "x86_64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/jna-5.7.0.jar/com/sun/jna/darwin/libjnidispatch.jnilib",
      "message": "The binary is not signed with a valid Developer ID certificate.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087721",
      "architecture": "arm64"
    },
    {
      "severity": "error",
      "code": null,
      "path": "pipes_installer.dmg/pipes Installer.app/Contents/Resources/app/0.dat/updates.zip/jars/jna-5.7.0.jar/com/sun/jna/darwin/libjnidispatch.jnilib",
      "message": "The signature does not include a secure timestamp.",
      "docUrl": "https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087733",
      "architecture": "arm64"
    }
  ]
}

我已经查看了签署并公证 install4j macOs dmg。但这并没有解决我的问题。 在此输入图片描述

Answer 1

您有各种 JAR 文件，其中包含未由 install4j 自动签名的二进制文件。

在“常规设置”->“代码签名”步骤中，编辑“要扫描二进制文件的 JAR 文件”设置并添加条目

libvlc_mac*
native-sso*
jna-*

然后它应该可以工作。