[tor-bugs] #30126 [Applications/Tor Browser]: Make Tor Browser on macOS compatible with Apple's notarization

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 10 17:37:40 UTC 2019


#30126: Make Tor Browser on macOS compatible with Apple's notarization
------------------------------------------------+--------------------------
 Reporter:  gk                                  |          Owner:  tbb-team
     Type:  task                                |         Status:  new
 Priority:  Very High                           |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201909  |  Actual Points:
Parent ID:                                      |         Points:  2
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by gk):

 Okay, here comes the zipped up .app dir:

 https://people.torproject.org/~gk/testbuilds/tbb-30126.zip
 https://people.torproject.org/~gk/testbuilds/tbb-30126.zip.asc

 When I unzip the archive after doing all the codesigning things I just end
 up with a `Contents` folder. I need to (re-)create `Tor Browser.app` and
 move that one into it. Not sure whether that's expected. Another thing I
 probably did differently: I looked at the `codesign.bash` file in
 security/mac/hardenedruntime and used an adapted
 `ditto -c -k "${BUNDLE}" "${OUTPUT_ZIP_FILE}"` for zipping the bundle up
 after signing but before notarization.

 Other than that I don't know.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30126#comment:50>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list