macOS built libraries do not specify SDK version
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lxml |
New
|
Undecided
|
Unassigned |
Bug Description
installed the latest wheel on python 3.8.10 on macos
lxml-4.
and tried to codesign .so libraries packaged into application bundle using pyinstaller.
Notice the warning below:
Library validation warning=OS X SDK version before 10.9 does not support Library Validation
And the output shows SDK version as 9.4.1
This is needed at minimum 10.9 to ensure that Apple's notarization service can check and notarize the application.
Otherwise the errors from the notary service:
"issues": [
{
"severity": "error",
"code": null,
"path": "Agent.
"message": "The binary uses an SDK older than the 10.9 SDK.",
"docUrl": null,
"
},
{
"severity": "error",
"code": null,
"path": "Agent.
"message": "The binary uses an SDK older than the 10.9 SDK.",
"docUrl": null,
"
}
% codesign -dvvvv objectify.
Executable=
Identifier=
Format=Mach-O thin (x86_64)
CodeDirectory v=20400 size=26388 flags=0x2(adhoc) hashes=819+2 location=embedded
*******
Library validation warning=OS X SDK version before 10.9 does not support Library Validation
VersionPlatform=1
VersionMin=657664 <<<< ------ min macOS version = 10.9
VersionSDK=590849 <<<< ------ macOS SDK version 9.4.1 ???
*******
Hash type=sha256 size=32
CandidateCDHash sha1=94a7a5f557
CandidateCDHashFull sha1=94a7a5f557
CandidateCDHash sha256=
CandidateCDHashFull sha256=
Hash choices=sha1,sha256
CMSDigest=
CMSDigestType=2
Executable Segment base=0
Executable Segment limit=2920448
Executable Segment flags=0x0
Page size=4096
CDHash=
Signature=adhoc
Info.plist=not bound
TeamIdentifier=not set
Sealed Resources=none
Internal requirements count=0 size=12
Interesting, the other .so in the package are compiled correctly, so the issue applies only to the 2 modules mentioned above, etree- and objectify...
% codesign -dvvvv ./Agent. app/Contents/ MacOS/lxml/ sax.cpython- 38-darwin. so Agent.app/ Contents/ MacOS/lxml/ sax.cpython- 38-darwin. so sax.cpython- 38-darwin runtime) hashes=51+2 location=embedded 4e9e93cf2c7e45b e37105172e586fb 4e9e93cf2c7e45b e37105172e586fb de5e948fc999327 095751d4837a3bf 7e33e20ec2 de5e948fc999327 095751d4837a3bf 7e33e20ec27631f 3ce88e66d813ab4 5f16 fddb014892c740e d0544015fd39702 d67c87ec75f6f4a 7fb414218176fc2 1777 de5e948fc999327 095751d4837a3bf 7e33e20ec2 ******* ******* ******* ****** ******* **
Executable=
Identifier=
Format=Mach-O thin (x86_64)
CodeDirectory v=20500 size=1825 flags=0x10000(
VersionPlatform=1
VersionMin=657664
VersionSDK=658688
Hash type=sha256 size=32
CandidateCDHash sha1=97baab735b
CandidateCDHashFull sha1=97baab735b
CandidateCDHash sha256=
CandidateCDHashFull sha256=
Hash choices=sha1,sha256
CMSDigest=
CMSDigestType=2
Executable Segment base=0
Executable Segment limit=131072
Executable Segment flags=0x0
Page size=4096
CDHash=
Signature size=9200
Authority=
Authority=Apple Worldwide Developer Relations Certification Authority
Authority=Apple Root CA
Timestamp=Sep 24, 2021 at 11:03:15 AM
Info.plist=not bound
TeamIdentifier=
Runtime Version=10.13.0
Sealed Resources=none
Internal requirements count=1 size=196