[tor-bugs] #30126 [Applications/Tor Browser]: Make Tor Browser on macOS compatible with Apple's notarization

[Tor Bug Tracker & Wiki]

#30126: Make Tor Browser on macOS compatible with Apple's notarization
------------------------------------------------+--------------------------
 Reporter:  gk                                  |          Owner:  tbb-team
     Type:  task                                |         Status:  new
 Priority:  Very High                           |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201909  |  Actual Points:
Parent ID:                                      |         Points:  2
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by mcs):

 Replying to [comment:53 gk]:
 > Hrm, okay. Let's first test whether my signing attempts now succeed by
 following your instructions closer (I think I messed up the stapling at
 least yesterday) and appease our Gatekeeper:
 >
 > https://people.torproject.org/~gk/testbuilds/TorBrowser-9.0a6-osx64_en-
 US_30126.dmg
 > https://people.torproject.org/~gk/testbuilds/TorBrowser-9.0a6-osx64_en-
 US_30126.dmg.asc
 >
 > I then thought, testing with 8.5.5 as well because maybe the crash you
 saw is esr68-based. Here is the result:
 >
 > https://people.torproject.org/~gk/testbuilds/TorBrowser-8.5.5-osx64_en-
 US_30126.dmg
 > https://people.torproject.org/~gk/testbuilds/TorBrowser-8.5.5-osx64_en-
 US_30126.dmg.asc

 Both of these builds work fine on both 10.15 beta 7 and 10.14.6. Even the
 `TorBrowser-Data` weirdness and content process crashes have disappeared.

 Kathy and I also tested the 9.0a6 build on macOS 10.9.x and confirmed that
 the #31464 problem is gone too.  Good news all the way around!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30126#comment:56>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online