Fossil SCM
How To Sign Mac Binaries
6 years, 5 months ago by drh
2019-10-14
MacOS 10.15 "Catalina" won't run unsigned binaries by default, I am told. So precompiled programs, such as the precompiled Fossil binaries on this website, must be signed for maximum ease-of-use. Here are my notes on how to go about doing that, in general, gleaned from multiple documentation sources and experimentation.
-
Get an Apple Developer-ID. (Mine is "[email protected]").
-
Turn on 2FA on your Developer-ID
-
Install and run Xcode
-
Under Xcode/Preferences/Accounts, in the lower right-hand corner is a button for "Manage Certificates...". Click that button.
-
Click the "+" sign on the bottom left to get yourself a certificate.
-
Now you can sign binaries using a command like: "
codesign -s [email protected] fossil"- Change "[email protected]" to your developer-id
- Change "fossil" to be the name of the executable you are trying to sign.
- You will get a GUI password prompt to authorize the signature