SpokesSDK-3.23.53335.34198.pkg is not notarized

5 posts / 0 new

Thu, 01/13/2022 - 01:36

omarfro

We are using Plat headsets in our electron app, so I have an issue with `SpokesSDK-3.23.53335.34198.pkg` file, it is not notarized from Apple. So the build failed. The logs for our build: { "logFormatVersion": 1, "jobId": "2f8ba5e7-214e-4d2c-9a56-511772dd530e", "status": "Invalid", "statusSummary": "Archive contains critical validation errors", "statusCode": 4000, "archiveFilename": "Rainbow.zip", "uploadDate": "2022-01-11T13:41:36Z", "sha256": "11a61753d58c0d75eec98647cddd53ca1f975b1cc3d3d97b518f83469ce48df9", "ticketContents": null, "issues": [ { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/MacOS/SpokesRestService", "message": "The signature of the binary is invalid.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/MacOS/SpokesRestService", "message": "The signature does not include a secure timestamp.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/MacOS/SpokesRestService", "message": "The executable does not have the hardened runtime enabled.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/MacOS/SpokesRestService", "message": "The executable requests the com.apple.security.get-task-allow entitlement.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/Frameworks/Spokes3G.framework/Spokes3G", "message": "The signature of the binary is invalid.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/Frameworks/Spokes3G.framework/Versions/A/Spokes3G", "message": "The signature of the binary is invalid.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/Frameworks/Spokes3G.framework/Versions/A/Frameworks/DFU.framework/DFU", "message": "The signature of the binary is invalid.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/Frameworks/Spokes3G.framework/Versions/Current/Spokes3G", "message": "The signature of the binary is invalid.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/SpokesRestSample/SpokesRestService.zip/SpokesRestService.app/Contents/Frameworks/Spokes3G.framework/Versions/Current/Frameworks/DFU.framework/DFU", "message": "The signature of the binary is invalid.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/Spokes3GSDK.framework/Versions/A/Spokes3GSDK", "message": "The signature does not include a secure timestamp.", "docUrl": null, "architecture": "x86_64" }, { "severity": "error", "code": null, "path": "Rainbow.zip/Rainbow.app/Contents/Spokes3GSDKMac/SpokesSDK-3.23.53335.34198.pkg/inner.pkg Contents/Payload/Applications/Spokes SDK/SpokesSDK-3.23.53335.34198/Spokes3GSDK.framework/Versions/A/Frameworks/libUtilityDynamic.dylib", "message": "The signature does not include a secure timestamp.", "docUrl": null, "architecture": "x86_64" } ] }

Thu, 01/13/2022 - 04:16

lcollins

Hi, I have now posted the updated Mac SDK component here, version 3.24.0: https://developer.plantronics.com/softphone-integration-hub-sdks Please try including this new version with your app deployment, and let us know the result. Thanks, Lewis.

Sun, 04/24/2022 - 04:47

omarfro

Hi again lcollins, I know it is an old ticket, but I'm still facing that issue, now I'm using SpokesSDK-3.24.53523.36336.pkg We can not build our app and the reason is your app doesn't sign. You can check it via this command: =>> `xcrun stapler staple SpokesSDK-3.24.53523.36336.pkg` =>>The result is: Processing:SpokesSDK-3.24.53523.36336.pkg CloudKit query for SpokesSDK-3.24.53523.36336.pkg (1/8fd85cbd6901620574d5205d51a39f5942f083d2) failed due to "Record not found". Could not find base64 encoded ticket in response for 1/8fd85cbd6901620574d5205d51a39f5942f083d2 The staple and validate action failed! Error 65. =========== FYI, When checking the signing for PlantronicsHubInstaller.dmg it is OK, but we can not add it on our install, because it is huge as you know. ==>> xcrun stapler staple Spokes3GSDKMac/PlantronicsHubInstaller.dmg Processing: PlantronicsHubInstaller.dmg Processing: PlantronicsHubInstaller.dmg The staple and validate action worked! Thanks in advance!

Mon, 05/09/2022 - 07:12

lcollins

Hi Omar, Thank you for your patience on this one. I have raised the case to our support team, as would require engineering to get involved. Were you able to include the SDK previously with an older version? Also, which Hub API did you use? If it is REST API, then you could advise your users to install Plantronics Hub on the Mac themselves? If it is Native API, then you need to include the SDK files. If it is Native API, could you include the Spokes.so and PlantronicsDevices.xml directly, rather than the SDK pkg? As discussed here: https://developer.plantronics.com/article/plantronics-sdk-3x-deployment-options Thanks, Lewis.

Sun, 05/15/2022 - 03:33

(Reply to #4) #5

omarfro

Hi Collins, We were using the native SDK, but now we replaced it with the js library to avoid the crash issues (but we faced the signing issue for the SDK), we advised our users to install Plantronics Hub as a workaround until fixing the signing issue from your side, but some users didn't accept that request since it is a full app with large size as you know. Thanks in advance!

Add new comment