When signing the executable (compiled with pyinstaller) it signs the exe by default. At most, one can integrate on the said signature an Apple Dev ID using the parameter
--codesign-identity at the time of compilation.
The problem is that said signature is considered as invalid when running the notarization process on the Apple site.
The other option, is substitute the signature by one placed by Apple, using the command:
codesign -s "Apple Cert dev ID" -o runtime -f --timestamp fullpathFiletoSign
Using the later, it is possible to notarize the exe (assuming all other steps are properly done) BUT the compiled file fails to run saying something like what is shown below:
So, if the exe file is properly signed following apple rules, it broke and can't execute. If one run the exe without change its original signature (the one placed by pyinstaller) it run with no problem (once is helped to transverse Gatekeeper).
Has anyone going thru this dilemma before?
Is there a way to just compile the python script without any signature (and then signed for the first time with apple-style/rules)?
Thanks
This is the error when the Apple-signed code run (no error when using the original pyinstaller signature
[1419] Error loading Python lib '/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python': dlopen: dlopen(/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python, 0x000A): tried: '/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python' (code signature in <88BFFD37-99D8-36AB-9B95-9F54B30BD667> '/private/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python' not valid for use in process: mapped file has no Team ID and is not a platform binary (signed with custom identity or adhoc?)), '/System/Volumes/Preboot/Cryptexes/OS/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python' (no such file), '/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python' (code signature in <88BFFD37-99D8-36AB-9B95-9F54B30BD667> '/private/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python' not valid for use in process: mapped file has no Team ID and is not a platform binary (signed with custom identity or adhoc?)), '/private/var/folders/80/35xy0t2n3t96b5nl5ldl24_r0000gn/T/_MEIipPlLr/Python' (code signature in <88BFFD37-99D8-36AB-9B95-9F54B30BD667>