# Code signing Processing sketches

**URL:** <https://discourse.processing.org/t/code-signing-processing-sketches/14589>\
**Category:** Processing\
**Created:** [October 10, 2019, 10:03pm UTC](https://discourse.processing.org/t/code-signing-processing-sketches/14589 "2019-10-10T22:03:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dtidgwell](https://avatars.discourse-cdn.com/v4/letter/d/47e85d/32.png) [@dtidgwell](https://discourse.processing.org/u/dtidgwell)\
**Post date:** [October 10, 2019, 10:03pm UTC](https://discourse.processing.org/t/code-signing-processing-sketches/14589/1 "2019-10-10T22:03:28Z")

</div>

Does anyone have experience in code signing Processing sketches and getting them notarized by Apple for distribution?  
With the new macOS, Catalina, it’s getting harder to give people compiled copies of sketches without their macs complaining about insecure software when they try to run them.

---

<div class="post-metadata">

**Author:** ![jeremydouglass](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/jeremydouglass/32/20_2.png) [@jeremydouglass](https://discourse.processing.org/u/jeremydouglass)\
**Post date:** [October 13, 2019, 4:40pm UTC](https://discourse.processing.org/t/code-signing-processing-sketches/14589/2 "2019-10-13T16:40:47Z")

</div>

I have not done it (and not yet on Catalina) but I believe that you need to enroll in the $99 / yr Mac developer program to get an ID

- [Apple Developer Program - Apple Developer](https://developer.apple.com/programs/)
- [Signing Mac Software with Developer ID - Apple Developer](https://developer.apple.com/developer-id/)

Then do code signing by generating a signing certificate with your ID, and use that certificate to create a signed Info.plist that you place in your .app package – you could do this using XCode or the `codesign` command-line tool:

- [Code Signing Tasks](https://developer.apple.com/library/archive/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html)
- [Code Signing - Support - Apple Developer](https://developer.apple.com/support/code-signing/)

…and the tricky part is notarizing, which I think (?) must be done through XCode, even without an XCode build, using `xcrun altool` . I’m hoping to learn more about this soon. Overview on [Signing Mac Software with Developer ID - Apple Developer](https://developer.apple.com/developer-id/)

> Mac apps, installer packages, and kernel extensions that are signed with Developer ID must also be notarized by Apple in order to run on macOS Catalina.

> Submitting with Xcode
> 
> **Unpublished Software.** It’s easy to get unpublished software notarized with the Export process or xcodebuild. Custom build workflows are supported by the xcrun altool command line tool for uploading, and you can use xcrun stapler to attach the ticket to the package.
> 
> **Published Software.** To submit software you’ve already published, upload it using the xcrun altool command line tool. Several file types are supported, including .zip, .pkg, and .dmg, so you can upload the same package you already distribute to users.

---

<div class="post-metadata">

**Author:** ![dtidgwell](https://avatars.discourse-cdn.com/v4/letter/d/47e85d/32.png) [@dtidgwell](https://discourse.processing.org/u/dtidgwell)\
**Post date:** [October 13, 2019, 9:05pm UTC](https://discourse.processing.org/t/code-signing-processing-sketches/14589/3 "2019-10-13T21:05:02Z")

</div>

Thanks for your help!  
I have a developer account, so I generated a signing cert through the keychain access app. Good.  
The package generated by Processing already has an Info.plist file inside which looks like it has everything necessary. Also good.  
But when I run codesign and point it at either the bundle or the binary, I get this:  
“resource fork, Finder information, or similar detritus not allowed”

To be honest, I’m also not sure what “identity” in the codesign command should look like. I fed it the string on the cert, but that may not be right. This signing stuff is all new to me.

Any thoughts?  
Again, thanks

---

<div class="post-metadata">

**Author:** ![jeremydouglass](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/jeremydouglass/32/20_2.png) [@jeremydouglass](https://discourse.processing.org/u/jeremydouglass)\
**Post date:** [October 14, 2019, 5:00am UTC](https://discourse.processing.org/t/code-signing-processing-sketches/14589/4 "2019-10-14T05:00:10Z")

</div>

> [@dtidgwell](#):
>
> resource fork, Finder information, or similar detritus not allowed

For that error:

> **[Technical Q&A QA1940: Code signing fails with error 'resource fork,...](https://developer.apple.com/library/archive/qa/qa1940/_index.html)**
>
> QA1940: describes the cause of a new codesign error on iOS 10, macOS Sierra, watchOS 3, and tvOS 10.