Packaged and notarized SLIP-39-11.0.2.pkg successfully

Author: pjkundert

GNUmakefile

@@ -11,9 +11,10 @@ TEAMID		?= ZD8TVTCXDS
 # The unique App ID assigned by App Store Connect, under App Information (NOT your Apple ID!!)
 APPID		?= 1608360813
 #DEVID		?= 3rd Party Mac Developer Application: Perry Kundert ($(TEAMID))
-DEVID		?= Developer ID Application: Perry Kundert ($(TEAMID))
-PKGID		?= 3rd Party Mac Developer Installer: Perry Kundert ($(TEAMID))
-#PKGID		?= Developer ID Installer: Perry Kundert ($(TEAMID))
+#DEVID		?= Developer ID Application: Perry Kundert ($(TEAMID))
+DEVID		?= DDB5489E29389E9081E0A2FD83B6555D1B101829
+#PKGID		?= 3rd Party Mac Developer Installer: Perry Kundert ($(TEAMID))
+PKGID		?= Developer ID Installer: Perry Kundert ($(TEAMID))
 DSTID		?= Apple Distribution: Perry Kundert ($(TEAMID))
 BUNDLEID	?= ca.kundert.perry.SLIP39
 APIISSUER	?= 5f3b4519-83ae-4e01-8d31-f7db26f68290
@@ -381,13 +382,15 @@ dist/SLIP-39-$(VERSION).dmg.upload-app: dist/SLIP-39-$(VERSION).dmg dist/SLIP-39
 # o Need ... --product <path-to-app-bundle-Info.plist>
 # According to this article, a "Developer ID Installer:..." signing key is required:
 # See: https://forums.ivanti.com/s/article/Obtaining-an-Apple-Developer-ID-Certificate-for-macOS-Provisioning?language=en_US&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1
+# Must copy the app w/ ditto, into a target dir structure including the destination location, eg. /Applications/SLIP-39.app/...
 # 
 dist/SLIP-39-$(VERSION).pkg:	dist/SLIP-39.app
+	rm -rf /tmp/SLIP-39
+	ditto $< /tmp/SLIP-39/Applications/SLIP-39.app
 	productbuild --sign "$(PKGID)" --timestamp \
 	    --identifier "$(BUNDLEID).pkg" \
 	    --version $(VERSION) \
-	    --component $< /Applications \
-	    $@
+	    --root /tmp/SLIP-39/Applications/ / $@
 
 
 # Confirm that the .pkg is signed w/ the correct certificates.

SLIP-39-macOS.spec

@@ -6,55 +6,51 @@ datas += collect_data_files('shamir_mnemonic')
 datas += collect_data_files('slip39')
 
 
-block_cipher = None
+a = Analysis(
+    ['SLIP-39.py'],
+    pathex=[],
+    binaries=[],
+    datas=datas,
+    hiddenimports=['slip39'],
+    hookspath=[],
+    hooksconfig={},
+    runtime_hooks=[],
+    excludes=[],
+    noarchive=False,
+)
+pyz = PYZ(a.pure)
 
-
-a = Analysis(['SLIP-39.py'],
-             pathex=[],
-             binaries=[],
-             datas=datas,
-             hiddenimports=['ipaddress'],
-             hookspath=[],
-             hooksconfig={},
-             runtime_hooks=[],
-             excludes=[],
-             win_no_prefer_redirects=False,
-             win_private_assemblies=False,
-             cipher=block_cipher,
-             noarchive=False)
-pyz = PYZ(a.pure, a.zipped_data,
-             cipher=block_cipher)
-
-exe = EXE(pyz,
-          a.scripts, 
-          [],
-          exclude_binaries=True,
-          name='SLIP-39',
-          debug=False,
-          bootloader_ignore_signals=False,
-          strip=False,
-          upx=True,
-          console=False,
-          disable_windowed_traceback=False,
-          target_arch=None,
-          codesign_identity='Developer ID Application: Perry Kundert (ZD8TVTCXDS)',
-          entitlements_file='./SLIP-39.metadata/entitlements.plist' )
-coll = COLLECT(exe,
-               a.binaries,
-               a.zipfiles,
-               a.datas, 
-               strip=False,
-               upx=True,
-               upx_exclude=[],
-               name='SLIP-39')
-app = BUNDLE(coll,
-             name='SLIP-39.app',
-             icon='images/SLIP-39.icns',
-             version='11.0.2',
-             info_plist={
-                 'CFBundleVersion':'11.0.2',
-                 'CFBundlePackageType':'APPL',
-                 'LSApplicationCategoryType':'public.app-category.finance',
-                 'LSMinimumSystemVersion':'10.15.0',
-             },
-             bundle_identifier='ca.kundert.perry.SLIP39')
+exe = EXE(
+    pyz,
+    a.scripts,
+    a.binaries,
+    a.datas,
+    [],
+    name='SLIP-39',
+    debug=False,
+    bootloader_ignore_signals=False,
+    strip=False,
+    upx=True,
+    upx_exclude=[],
+    runtime_tmpdir=None,
+    console=False,
+    disable_windowed_traceback=False,
+    argv_emulation=False,
+    target_arch=None,
+    codesign_identity='DDB5489E29389E9081E0A2FD83B6555D1B101829',
+    entitlements_file='./SLIP-39.metadata/entitlements.plist',
+)
+app = BUNDLE(
+    exe,
+    name='SLIP-39.app',
+    icon='images/SLIP-39.icns',
+    version='11.0.2',
+    info_plist={
+        'CFBundleVersion':'11.0.2',
+        'CFBundlePackageType':'APPL',
+        'LSApplicationCategoryType':'public.app-category.utilities',
+        'LSMinimumSystemVersion':'10.15.0',
+        'NSHumanReadableCopyright':"Copyright © 2023 Perry Kundert.",
+    },
+    bundle_identifier='ca.kundert.perry.SLIP39',
+)

SLIP-39.metadata/entitlements.plist

@@ -2,7 +2,9 @@
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
   <dict>
+    <!--
     <key>com.apple.security.app-sandbox</key>				<true/>
+      -->	
     <key>com.apple.security.files.user-selected.read-write</key>	<true/>
     <!-- These are required for binaries built by PyInstaller -->
     <key>com.apple.security.cs.allow-jit</key>				<true/>