Notarizing fixes III

Author: dbarashev

.github/workflows/build-packages.yml

@@ -167,7 +167,7 @@ jobs:
 
             - name: Sign GanttProject.app
               run: |
-                  build-bin/notarize.sh $VERSION "BarD Software s.r.o" "$MACOS_NOTARIZE_PASSWORD" all
+                  build-bin/notarize.sh $VERSION "BarD Software s.r.o. Developer Key" "$MACOS_NOTARIZE_PASSWORD" all
 
             - id: 'auth'
               uses: 'google-github-actions/auth@v1'

build-bin/notarize.sh

@@ -21,17 +21,19 @@ do_prepare2() {
   ENTITLEMENTS="build-cfg/ganttproject.entitlements.xml"
 
   echo "Signing libraries and executables..."
+  find "$APP_PATH" -type f \( -name "*.dylib" -or -name "*.so" -or -perm +111 \) -not -path "$RUNTIME_PATH/*"
   find "$APP_PATH" -type f \( -name "*.dylib" -or -name "*.so" -or -perm +111 \) -not -path "$RUNTIME_PATH/*" -exec codesign --timestamp -f -s "$SIG" --prefix com.bardsoftware. --entitlements "$ENTITLEMENTS" --options runtime -v --keychain "$KEYCHAIN" {} \;
 
   echo "Signing Java runtime..."
+  find "$RUNTIME_PATH" -type f \( -name "*.dylib" -or -name "*.so" -or -perm +111 \)
   find "$RUNTIME_PATH" -type f \( -name "*.dylib" -or -name "*.so" -or -perm +111 \) -exec codesign --timestamp -f -s "$SIG" --prefix com.bardsoftware. --entitlements "$ENTITLEMENTS" --options runtime -v --keychain "$KEYCHAIN" {} \;
   codesign -f --timestamp --entitlements "$ENTITLEMENTS" -s "$SIG" --prefix com.bardsoftware. --options runtime -v --keychain "$KEYCHAIN" "$RUNTIME_PATH"
 
   echo "Signing the application bundle..."
   codesign -f --timestamp --entitlements "$ENTITLEMENTS" -s "$SIG" --prefix com.bardsoftware. --options runtime -v --keychain "$KEYCHAIN" "$APP_PATH"
 
   echo "Verifying signature..."
-  codesign -vvv --deep --strict "$APP_PATH"
+  codesign -f -vvv --deep --strict "$APP_PATH"
   spctl -a -t exec -vv "$APP_PATH"
 }
 

build-cfg/ganttproject.entitlements.xml

@@ -6,11 +6,13 @@
     <true/>
     <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
-    <key>com.apple.security.cs.disable-executable-page-protection</key>
-    <true/>
     <key>com.apple.security.cs.disable-library-validation</key>
     <true/>
     <key>com.apple.security.cs.allow-dyld-environment-variables</key>
     <true/>
+    <key>com.apple.security.files.user-selected.read-write</key>
+    <true/>
+    <key>com.apple.security.files.downloads.read-write</key>
+    <true/>
 </dict>
 </plist>

ganttproject-builder/BUILD-HISTORY-MAJOR

@@ -10,5 +10,5 @@
 2025-01-29 3316 fixed issue 2569, added group to MSI silent
 2025-07-04 3390 Test build of GanttProject 3.4 Beta I ....
 2026-01-16 3390 Test build of GanttProject 3.4 Beta I ....
-2026-01-17 3390 Test build of GanttProject 3.4 Beta I .......
+2026-01-17 3390 Test build of GanttProject 3.4 Beta I ........
 --