D 2019-10-14T17:22:33.352
L How\sTo\sSign\sMac\sBinaries
N text/x-markdown
U drh
W 1060
*2019-10-14*

MacOS 10.15 "Catalina" won't run unsigned binaries by default, I am told.
So precompiled programs, such as the precompiled Fossil binaries on this
website, must be signed for maximum ease-of-use.  Here are my notes on how
to go about doing that, in general, gleaned from multiple documentation
sources and experimentation.

  1.  Get an Apple Developer-ID.  (Mine is "drh@sqlite.org").

  2.  Turn on 2FA on your Developer-ID

  3.  Install and run Xcode

  4.  Under Xcode/Preferences/Accounts, in the lower right-hand corner is a
      button for "Manage Certificates...".  Click that button.

  5.  Click the "+" sign on the bottom left to get yourself a certificate.

  6.  Now you can sign binaries using a command like:
      "`codesign -s drh@sqlite.org fossil`"
      <ol type="a">
      <li> Change "drh@sqlite.org" to your developer-id
      <li> Change "fossil" to be the name of the executable
      you are trying to sign.
      <li> You will get a GUI password prompt to authorize the signature
      </ol>
Z 0fea94e597eb17f5f1d8290858d97133