macOS:自制 dylib 公式都遇到代码签名错误

kak*_*kyo 3 macos homebrew code-signing

在 macOS 上,我曾经使用通过 Homebrew 安装的动态库有问题。

但是使用我的最新设置:

  • 莫哈韦沙漠 10.14.6
  • Xcode 11.2.1

我开始遇到以前可以工作的库(例如 protobuf)的代码签名问题。

以下是运行成功构建的项目时的控制台输出:


dyld: Library not loaded: /usr/local/opt/protobuf/lib/libprotobuf.22.dylib
  Referenced from: /path/to/myproj/_build/Debug/mam-host
  Reason: no suitable image found.  Did find:
    /usr/local/opt/protobuf/lib/libprotobuf.22.dylib: code signature in (/usr/local/opt/protobuf/lib/libprotobuf.22.dylib) not valid for use in process using Library Validation: mapped file has no cdhash, completely unsigned? Code has to be at least ad-hoc signed.
    /usr/local/Cellar/protobuf/3.11.1/lib/libprotobuf.22.dylib: code signature in (/usr/local/Cellar/protobuf/3.11.1/lib/libprotobuf.22.dylib) not valid for use in process using Library Validation: mapped file has no cdhash, completely unsigned? Code has to be at least ad-hoc signed.
Program ended with exit code: 9
Run Code Online (Sandbox Code Playgroud)

我该怎么办?

我应该只是

codesign -s "Mac Developer: me" /usr/local/opt/protobuf/lib/libprotobuf.22.dylib
Run Code Online (Sandbox Code Playgroud)

还是我必须从源代码构建?

PS 在上面运行 codesign 命令后,我得到了完全相同的错误。

kak*_*kyo 6

终于解决了。

您有两个选择:

  • 选项 1禁用检查 libs 的代码签名Project Settings > Signing & Capabilities > Hardened Runtime > Runtime Exceptions > Diable Library Validation
  • 选项 2:使用您的代码签名身份对库进行代码签名,例如Apple Development: Your Name (10-char-ID)
    • 删除公共签名: codesign --remove-signature /path/to/theirlib.dylib
    • 与项目签名: codesign -s "Apple Development: Your Name (10-char-ID)" /path/to/theirlib.dylib