Error message "source=obsolete resource envelope" when signing with Yosemite

Targets macOS
1

Since the upgrade to Yosemite the signing of my main app gives me the error message “source=obsolete resource envelope”. Signing is done with a script from AppWrapper Mini:

call DoShellCommand( “/usr/bin/codesign -f -s '”+ appCodeSignature +"’ " + appPath + “/Contents/Frameworks/.dylib" )
call DoShellCommand( “/usr/bin/codesign -f -s '”+ appCodeSignature +"’ " + appPath + “/Contents/Frameworks/XojoFramework.framework/Versions/A/XojoFramework” )
call DoShellCommand( “/usr/bin/codesign -f -s '”+ appCodeSignature +"’ " + appPath + “/Contents/Frameworks/XojoFramework.framework” )
call DoShellCommand( “/usr/bin/codesign -f -s '”+ appCodeSignature +"’ " + appPath + "/Contents/python/do_imap/Contents/Frameworks/.dylib” )
call DoShellCommand( “/usr/bin/codesign -f -s '”+ appCodeSignature +"’ " + appPath + “/Contents/python/do_imap.app” )
call DoShellCommand( “/usr/bin/codesign -f -s '”+ appCodeSignature +"’ " + appPath + “/Contents/vcomponents/*.dylib” )

A codesign gives me the following result:

/Users/beatrixwillius/Documents/\ Datei/Development/Mail\ Archiver/code\ current/Builds\ -\ max.rbp/Mac\ OS\ X\ \(Cocoa\ Intel\)/Mail\ Archiver\ X.app
Executable=/Users/beatrixwillius/Documents/ Datei/Development/Mail Archiver/code current/Builds - max.rbp/Mac OS X (Cocoa Intel)/Mail Archiver X.app/Contents/MacOS/Mail Archiver X
Identifier=com.mothsoftware.mailarchiverx
Format=bundle with Mach-O thin (i386)
CodeDirectory v=20200 size=111634 flags=0x0(none) hashes=5574+3 location=embedded
Hash type=sha1 size=20
CDHash=a3599107607239d9fb2f6269355573891201aedd
Signature size=8516
Authority=Developer ID Application: Beatrix Willius
Authority=Developer ID Certification Authority
Authority=Apple Root CA
Timestamp=20.10.2014 12:46:04
Info.plist entries=14
TeamIdentifier=72695Z3887
Sealed Resources version=2 rules=12 files=852
Internal requirements count=1 size=192

Does anyone have an idea what might cause this? I’ve googled a bit and found that others have similar problems. But there wasn’t a clear solution.

Latest Xojo.

2

Some more information:

  1. I still need to work on the signing of my Python app. This isn’t working.
  2. Here is the confusing part: my helper app shows an ok with signing directly after build. But when I copy it into the final folder of the main app then there is the same error message as above with the “obsolete resource envelope”.
3

Found the problem: I need the helper app to go to Library/Login Items. The copy files Build Step in Xojo makes it die a sudden death for a file path. Instead I’m now using a shell script. A “cp” doesn’t preserve the signing.

4

I used App Wrapper Mini, until I decided to add a helper, and App Wrapper 2.5 did sign everything brilliantly without any additional hassle :slight_smile:

5

Hmm… when I tried this it didn’t work. Don’t we have to sign from the inside out? Meaning dylibs, HelperApps and then main app?

6

Sam apparently figured it out. I dropped my app into App Wrapper and did not have to set anything.