Sidecar not working after signing app - MAC OS

[NitinRamnani]

Did anyone tried to use sidecar with signed app? It seems sidecar doesn't work.

[dreampulse]

Did anyone solve this issue?

I had a look into tooling/bundler/src/bundle/macos/sign.rs. They just sign the application and not the sidecar.
(At lest for macOS, it seems to work for windows)

[dreampulse]

I manually signed the sidecar. In the CI-Pipeline (github actions) this looks like this for us:

      - name: sign sidecar (macos only)
        if: matrix.platform == 'macos-latest'
        run: |
          security create-keychain -p my_temporary_keychain_password my_temporary_keychain.keychain
          security set-keychain-settings my_temporary_keychain.keychain
          security unlock-keychain -p my_temporary_keychain_password my_temporary_keychain.keychain
          security list-keychains -d user -s my_temporary_keychain.keychain $(security list-keychains -d user | sed 's/["]//g')

          echo "${{ secrets.APPLE_CERTIFICATE }}" > cert.p12.base64
          base64 -d -i cert.p12.base64 -o cert.p12

          security import ./cert.p12 -k my_temporary_keychain.keychain -P "${{ secrets.APPLE_CERTIFICATE_PASSWORD }}" -T /usr/bin/codesign
          security set-key-partition-list -S apple-tool:,apple:, -s -k my_temporary_keychain_password -D "${{ secrets.APPLE_SIGNING_IDENTITY }}" -t private my_temporary_keychain.keychain

          codesign --force -s "${{ secrets.APPLE_SIGNING_IDENTITY }}" --keychain my_temporary_keychain.keychain --deep $THE_LOCATION_OF_THE_SIDECAR_BIN

          security delete-keychain my_temporary_keychain.keychain
          security list-keychains -d user -s login.keychain

[dreampulse]

But in perspective, this is an actually a bug. In bundler/src/bundle/macos/app.rs the copy_binaries_to_bundle-fn should sign the sidecar as well.

[samheutmaker]

@lucasfernog Any docs on signing sidecars? What is the appropriate behavior here?

[boan-anbo]

Same with embedded binaries, you'll have to manually sign all external files on MacOs, e.g. codesign -s "Developer ID Application: Name (Key)" binaries.dylib