[tor-bugs] #30126 [Applications/Tor Browser]: Make Tor Browser on macOS compatible with Apple's notarization

[Tor Bug Tracker & Wiki]

#30126: Make Tor Browser on macOS compatible with Apple's notarization
------------------------------------------------+--------------------------
 Reporter:  gk                                  |          Owner:  tbb-team
     Type:  task                                |         Status:  new
 Priority:  Very High                           |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201907  |  Actual Points:
Parent ID:                                      |         Points:
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by gk):

 Replying to [comment:11 mcs]:

 [snip]

 > That is strange. We then used `otool -l` on macOS to look at the
 `firefox` binary. The output indeed indicates that the minimum macOS
 version and SDK version are not what we would expect:
 >  cmd LC_VERSION_MIN_MACOSX
 >  cmdsize 16
 >  version 10.7
 >  sdk 10.6
 >
 > Kathy and I do not know enough about the cross-compile process to know
 where to look for a solution to this problem, but I think we need to fix
 this SDK issue before we can go further with notarization.

 Hm, I think we don't do something differently to what Mozilla is shipping.
 So, what is the Firefox ESR 60 output here? And does that change with the
 patch for bug 1270217 landed in Firefox (that is with Firefox 62)? What
 does the firefox binary for ESR 68 say in that regard?

 Meanwhile I've started a testbuild with the patch for bug 1270217 applied,
 in case that buys us something. I'll post a link to a bundle later when
 the build has finished.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30126#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online