Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-7250

Mac OS X App should be signed by a valid developer key

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 2.0-beta-2, 2.1.0, 2.2.0, 2.5.0, 2.5.1, 3.0
    • Fix Version/s: 3.0.3, 4.0.0
    • Component/s: build
    • Security Level: Public
    • Labels:
      None
    • Is this a Regression?:
      No
    • Sprint:
      Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19, Week of Jan 06-10, Sprint 0 - 1/13 thru 1/24, Sprint 0 - 1/13 thru 1/24, Build Sprint 9: 7/14 - 8/01

      Description

      Currently launching the Mac OS X version tells you it's from an unidentified developer. You have to right click to launch the app. We can fix this.

        Issue Links

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

          jchrisa J Chris Anderson [X] (Inactive) created issue -
          farshid Farshid Ghods (Inactive) made changes -
          Field Original Value New Value
          Fix Version/s 2.0 [ 10114 ]
          farshid Farshid Ghods (Inactive) made changes -
          Assignee Farshid Ghods [ farshid ] Jens Alfke [ jens ]
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          Chris,

          do you know what needs to change on the build machine to embed our developer key ?

          Show
          farshid Farshid Ghods (Inactive) added a comment - Chris, do you know what needs to change on the build machine to embed our developer key ?
          Hide
          jchrisa J Chris Anderson [X] (Inactive) added a comment -

          I have no idea. I could start researching how to get a key from Apple but maybe after the weekend.

          Show
          jchrisa J Chris Anderson [X] (Inactive) added a comment - I have no idea. I could start researching how to get a key from Apple but maybe after the weekend.
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          we can discuss this next week : ) . Thanks for reporting the issue Chris.

          Show
          farshid Farshid Ghods (Inactive) added a comment - we can discuss this next week : ) . Thanks for reporting the issue Chris.
          Hide
          steve Steve Yen added a comment -

          we'll want separate, related bugs (tasks) for other platforms, too (windows, linux)

          Show
          steve Steve Yen added a comment - we'll want separate, related bugs (tasks) for other platforms, too (windows, linux)
          steve Steve Yen made changes -
          Fix Version/s 2.0.1 [ 10399 ]
          Fix Version/s 2.0 [ 10114 ]
          Hide
          jens Jens Alfke added a comment -

          We need to get a developer ID from Apple; this will give us some kind of cert, and a local private key for signing.
          Then we need to figure out how to get that key and cert onto the build machine, in the Keychain of the account that runs the buildbot.

          Show
          jens Jens Alfke added a comment - We need to get a developer ID from Apple; this will give us some kind of cert, and a local private key for signing. Then we need to figure out how to get that key and cert onto the build machine, in the Keychain of the account that runs the buildbot.
          farshid Farshid Ghods (Inactive) made changes -
          Assignee Jens Alfke [ jens ] Phil Labee [ plabee ]
          farshid Farshid Ghods (Inactive) made changes -
          Sprint Status Next Sprint
          plabee Phil Labee (Inactive) made changes -
          Sprint Priority 5
          plabee Phil Labee (Inactive) made changes -
          Comment [ We are enrolled in the iOS developer program, but also need to enroll in the MacOSX developer program.

          Team Name: CouchOne
          Team ID: KAZWMGZL2X
          Program Type: iOS Developer Program
          New Start Date: Dec 05, 2012
          New Expiration Date: Dec 06, 2013 ]
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          the instructions to build is available here :
          https://github.com/couchbase/couchdbx-app
          we need to add codesign as a build step there

          Show
          farshid Farshid Ghods (Inactive) added a comment - the instructions to build is available here : https://github.com/couchbase/couchdbx-app we need to add codesign as a build step there
          plabee Phil Labee (Inactive) made changes -
          Priority Major [ 3 ] Blocker [ 1 ]
          plabee Phil Labee (Inactive) made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Status Next Sprint Current Sprint
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          Phil,

          do you have any update on this ticket. ?

          Show
          farshid Farshid Ghods (Inactive) added a comment - Phil, do you have any update on this ticket. ?
          Hide
          plabee Phil Labee (Inactive) added a comment -

          I have signing cert installed on 10.17.21.150 (MacBuild).

          Change to Makefile: http://review.couchbase.org/#/c/24149/

          Show
          plabee Phil Labee (Inactive) added a comment - I have signing cert installed on 10.17.21.150 (MacBuild). Change to Makefile: http://review.couchbase.org/#/c/24149/
          Hide
          plabee Phil Labee (Inactive) added a comment -

          need to change master.cfg and pass env.var. to package-mac

          Show
          plabee Phil Labee (Inactive) added a comment - need to change master.cfg and pass env.var. to package-mac
          Hide
          plabee Phil Labee (Inactive) added a comment -

          disregard previous. Have added signing to Xcode projects.

          see http://review.couchbase.org/#/c/24273/

          Show
          plabee Phil Labee (Inactive) added a comment - disregard previous. Have added signing to Xcode projects. see http://review.couchbase.org/#/c/24273/
          Hide
          plabee Phil Labee (Inactive) added a comment -

          To test this go to System Preferences / Security & Privacy, and on the General tab set "Allow applications downloaded from" to "Mac App Store and Identified Developers". Set this before running Couchbase Server.app the first time. Once an app has been allowed to run this setting is no longer checked for that app, and there doesn't seem to be a way to reset that.

          What is odd is that on my system, I allowed one unsigned build to run before restricting the app run setting, and then no other unsigned builds would be checked (and would all be allowed to run). Either there is a flaw in my testing methodology, or a serious weakness in this security setting: Just because one app called Couchbase Server was allowed to run should confer this privilege to other apps with the same name. A common malware tactic is to modify a trusted app and distribute it as update, and if the security setting keys off the app name it will do nothing to prevent that.

          I'm approving this change without having satisfactorily tested it.

          Show
          plabee Phil Labee (Inactive) added a comment - To test this go to System Preferences / Security & Privacy, and on the General tab set "Allow applications downloaded from" to "Mac App Store and Identified Developers". Set this before running Couchbase Server.app the first time. Once an app has been allowed to run this setting is no longer checked for that app, and there doesn't seem to be a way to reset that. What is odd is that on my system, I allowed one unsigned build to run before restricting the app run setting, and then no other unsigned builds would be checked (and would all be allowed to run). Either there is a flaw in my testing methodology, or a serious weakness in this security setting: Just because one app called Couchbase Server was allowed to run should confer this privilege to other apps with the same name. A common malware tactic is to modify a trusted app and distribute it as update, and if the security setting keys off the app name it will do nothing to prevent that. I'm approving this change without having satisfactorily tested it.
          Hide
          jens Jens Alfke added a comment -

          Strictly speaking it's not the app name but its bundle ID, i.e. "com.couchbase.CouchbaseServer" or whatever we use.

          > I allowed one unsigned build to run before restricting the app run setting, and then no other unsigned builds would be checked

          By OK'ing an unsigned app you're basically agreeing to toss security out the window, at least for that app. This feature is really just a workaround for older apps. By OK'ing the app you're not really saying "yes, I trust this build of this app" so much as "yes, I agree to run this app even though I don't trust it".

          > A common malware tactic is to modify a trusted app and distribute it as update

          If it's a trusted app it's hopefully been signed, so the user wouldn't have had to waive signature checking for it.

          Show
          jens Jens Alfke added a comment - Strictly speaking it's not the app name but its bundle ID, i.e. "com.couchbase.CouchbaseServer" or whatever we use. > I allowed one unsigned build to run before restricting the app run setting, and then no other unsigned builds would be checked By OK'ing an unsigned app you're basically agreeing to toss security out the window, at least for that app. This feature is really just a workaround for older apps. By OK'ing the app you're not really saying "yes, I trust this build of this app" so much as "yes, I agree to run this app even though I don't trust it". > A common malware tactic is to modify a trusted app and distribute it as update If it's a trusted app it's hopefully been signed, so the user wouldn't have had to waive signature checking for it.
          Hide
          jens Jens Alfke added a comment -

          Further thought: It might be a good idea to change the bundle ID in the new signed version of the app, because users of 2.0 with strict security settings have presumably already bypassed security on the unsigned version.

          Show
          jens Jens Alfke added a comment - Further thought: It might be a good idea to change the bundle ID in the new signed version of the app, because users of 2.0 with strict security settings have presumably already bypassed security on the unsigned version.
          Hide
          jin Jin Lim (Inactive) added a comment -

          Per bug scrubs, keep this a blocker since customers ran into this issues (and originally reported it).

          Show
          jin Jin Lim (Inactive) added a comment - Per bug scrubs, keep this a blocker since customers ran into this issues (and originally reported it).
          plabee Phil Labee (Inactive) made changes -
          Status In Progress [ 3 ] Open [ 1 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          revert the change so that builds can complete. App is currently not being signed.

          Show
          plabee Phil Labee (Inactive) added a comment - revert the change so that builds can complete. App is currently not being signed.
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          i suggest for 2.0.1 release we do this build manually.

          Show
          farshid Farshid Ghods (Inactive) added a comment - i suggest for 2.0.1 release we do this build manually.
          Hide
          jin Jin Lim (Inactive) added a comment -

          As one-off fix, add the signature manually and automate the required steps later in 2.0.2 or beyond.

          Show
          jin Jin Lim (Inactive) added a comment - As one-off fix, add the signature manually and automate the required steps later in 2.0.2 or beyond.
          Hide
          jin Jin Lim (Inactive) added a comment -

          Please move this bug to 2.0.2 after populating the required signature manually. I am lowing the severity to critical for it isn't no longer a blocking issue.

          Show
          jin Jin Lim (Inactive) added a comment - Please move this bug to 2.0.2 after populating the required signature manually. I am lowing the severity to critical for it isn't no longer a blocking issue.
          jin Jin Lim (Inactive) made changes -
          Priority Blocker [ 1 ] Critical [ 2 ]
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          Phil to upload the binary to latestbuilds , ( 2.0.1-101-rel.zip )

          Show
          farshid Farshid Ghods (Inactive) added a comment - Phil to upload the binary to latestbuilds , ( 2.0.1-101-rel.zip )
          Show
          plabee Phil Labee (Inactive) added a comment - Please verify: http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-160-rel-signed.zip
          Hide
          plabee Phil Labee (Inactive) added a comment -
          Show
          plabee Phil Labee (Inactive) added a comment - uploaded: http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-160-rel-signed.zip I can rename it when uploading for release.
          plabee Phil Labee (Inactive) made changes -
          Status Open [ 1 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          Hide
          farshid Farshid Ghods (Inactive) added a comment -

          i still do get the error that it is from an identified developer.

          Show
          farshid Farshid Ghods (Inactive) added a comment - i still do get the error that it is from an identified developer.
          farshid Farshid Ghods (Inactive) made changes -
          farshid Farshid Ghods (Inactive) made changes -
          Resolution Fixed [ 1 ]
          Status Resolved [ 5 ] Reopened [ 4 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          operator error.

          I rebuilt the app, this time verifying that the codesign step occurred.

          Uploaded now file to same location:

          http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-160-rel-signed.zip

          Show
          plabee Phil Labee (Inactive) added a comment - operator error. I rebuilt the app, this time verifying that the codesign step occurred. Uploaded now file to same location: http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-160-rel-signed.zip
          plabee Phil Labee (Inactive) made changes -
          Status Reopened [ 4 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          still need to perform manual workaround

          Show
          plabee Phil Labee (Inactive) added a comment - still need to perform manual workaround
          plabee Phil Labee (Inactive) made changes -
          Resolution Fixed [ 1 ]
          Status Resolved [ 5 ] Reopened [ 4 ]
          Show
          plabee Phil Labee (Inactive) added a comment - release candidate has been uploaded to: http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-172-signed.zip
          siri Sriram Melkote made changes -
          Summary Max OS X App should be signed by a valid developer key Mac OS X App should be signed by a valid developer key
          Hide
          wayne Wayne Siu added a comment - - edited

          Phil, looks like version 172/185 is still getting the error. My Mac version is 10.8.2

          Show
          wayne Wayne Siu added a comment - - edited Phil, looks like version 172/185 is still getting the error. My Mac version is 10.8.2
          Hide
          thuan Thuan Nguyen added a comment - - edited

          Install couchbase server (build 2.0.1-172 community version) in my mac osx 10.7.4 , I only see the warning message

          Show
          thuan Thuan Nguyen added a comment - - edited Install couchbase server (build 2.0.1-172 community version) in my mac osx 10.7.4 , I only see the warning message
          thuan Thuan Nguyen made changes -
          Attachment ss_2013-04-03_at_1.06.39 PM.png [ 17070 ]
          Show
          wayne Wayne Siu added a comment - Latest version (04.03.13) : http://builds.hq.northscale.net/latestbuilds/couchbase-server-community_x86_64_2.0.1-185-rel.zip
          Hide
          maria Maria McDuff (Inactive) added a comment -

          works in 10.7 but not in 10.8.
          if we can get the fix for 10.8 by tomorrow, end of day, QE is willing to test for release on tuesday, april 9.

          Show
          maria Maria McDuff (Inactive) added a comment - works in 10.7 but not in 10.8. if we can get the fix for 10.8 by tomorrow, end of day, QE is willing to test for release on tuesday, april 9.
          Hide
          plabee Phil Labee (Inactive) added a comment -

          The mac builds are not being automatically signed, so build 185 is not signed. The original 172 is also not signed.

          Did you try

          http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-172-signed.zip

          to see if that was signed correctly?

          Show
          plabee Phil Labee (Inactive) added a comment - The mac builds are not being automatically signed, so build 185 is not signed. The original 172 is also not signed. Did you try http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-172-signed.zip to see if that was signed correctly?
          plabee Phil Labee (Inactive) made changes -
          Status Reopened [ 4 ] In Progress [ 3 ]
          Hide
          wayne Wayne Siu added a comment -

          Phil,
          Yes, we did try the 172-signed version. It works on 10.7 but not 10.8. Can you take a look?

          Show
          wayne Wayne Siu added a comment - Phil, Yes, we did try the 172-signed version. It works on 10.7 but not 10.8. Can you take a look?
          Hide
          plabee Phil Labee (Inactive) added a comment -

          I rebuilt 2.0.1-185 and uploaded a signed app to:

          http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-185-rel.SIGNED.zip

          Test on a machine that has never had Couchbase Server installed, and has the security setting to only allow Appstore or signed apps.

          If you get the "Couchbase Server.app was downloaded from the internet" warning and you can click OK and install it, then this bug is fixed. The quarantining of files downloaded by a browser is part of the operating system and is not controlled by signing.

          Show
          plabee Phil Labee (Inactive) added a comment - I rebuilt 2.0.1-185 and uploaded a signed app to: http://packages.northscale.com/latestbuilds/couchbase-server-community_x86_64_2.0.1-185-rel.SIGNED.zip Test on a machine that has never had Couchbase Server installed, and has the security setting to only allow Appstore or signed apps. If you get the "Couchbase Server.app was downloaded from the internet" warning and you can click OK and install it, then this bug is fixed. The quarantining of files downloaded by a browser is part of the operating system and is not controlled by signing.
          Hide
          wayne Wayne Siu added a comment - - edited

          Tried the 185-signed version (see attached screen shot). Same error message.

          Show
          wayne Wayne Siu added a comment - - edited Tried the 185-signed version (see attached screen shot). Same error message.
          wayne Wayne Siu made changes -
          Hide
          plabee Phil Labee (Inactive) added a comment -

          This is not an error message related to this bug.

          Show
          plabee Phil Labee (Inactive) added a comment - This is not an error message related to this bug.
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          anil Anil Kumar made changes -
          Fix Version/s 2.0.2 [ 10418 ]
          Fix Version/s 2.0.1 [ 10399 ]
          anil Anil Kumar made changes -
          Affects Version/s 2.0.2 [ 10418 ]
          maria Maria McDuff (Inactive) made changes -
          Priority Critical [ 2 ] Blocker [ 1 ]
          Hide
          maria Maria McDuff (Inactive) added a comment -

          per bug triage, we need to have mac 10.8 osx working since it is a supported platform (published in the website).

          Show
          maria Maria McDuff (Inactive) added a comment - per bug triage, we need to have mac 10.8 osx working since it is a supported platform (published in the website).
          wayne Wayne Siu made changes -
          Rank Ranked lower
          wayne Wayne Siu made changes -
          Rank Ranked higher
          wayne Wayne Siu made changes -
          Sprint Build Team May 13th Sprint [ 15 ]
          Hide
          wayne Wayne Siu added a comment -

          Work Around:
          Step One
          Hold down the Control key and click the application icon. From the contextual menu choose Open.

          Step Two
          A popup will appear asking you to confirm this action. Click the Open button.

          Show
          wayne Wayne Siu added a comment - Work Around: Step One Hold down the Control key and click the application icon. From the contextual menu choose Open. Step Two A popup will appear asking you to confirm this action. Click the Open button.
          wayne Wayne Siu made changes -
          Assignee Phil Labee [ plabee ] Anil Kumar [ anil ]
          Hide
          anil Anil Kumar added a comment -

          we need to address signed key for both Windows and Mac deferring this to next release.

          Show
          anil Anil Kumar added a comment - we need to address signed key for both Windows and Mac deferring this to next release.
          anil Anil Kumar made changes -
          Fix Version/s 2.1 [ 10414 ]
          Fix Version/s 2.0.2 [ 10418 ]
          wayne Wayne Siu made changes -
          Rank Ranked higher
          wayne Wayne Siu made changes -
          Fix Version/s 2.1.1 [ 10620 ]
          Fix Version/s .major-release [ 10414 ]
          wayne Wayne Siu made changes -
          Rank Ranked higher
          dipti Dipti Borkar made changes -
          Assignee Anil Kumar [ anil ] Wayne Siu [ wayne ]
          Hide
          dipti Dipti Borkar added a comment -

          Please let's make sure this is fixed in 2.2.

          Show
          dipti Dipti Borkar added a comment - Please let's make sure this is fixed in 2.2.
          plabee Phil Labee (Inactive) made changes -
          Assignee Wayne Siu [ wayne ] Phil Labee [ plabee ]
          wayne Wayne Siu made changes -
          Rank Ranked higher
          wayne Wayne Siu made changes -
          Rank Ranked higher
          wayne Wayne Siu made changes -
          Sprint Build Team May 13th Sprint [ 15 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Link This issue depends on CBIT-334 [ CBIT-334 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          New keys will be created using new account.

          Show
          plabee Phil Labee (Inactive) added a comment - New keys will be created using new account.
          Hide
          plabee Phil Labee (Inactive) added a comment - - edited

          iOS Apps
          --------------
          Certificates:
          Production:
          "Couchbase, Inc." type=iOS Distribution expires Aug 12, 2014

          ~buildbot/Desktop/appledeveloper.couchbase.com/certs/ios/ios_distribution_appledeveloper.couchbase.com.cer

          Identifiers:
          App IDS:
          "Couchbase Server" id=com.couchbase.*

          Provisining Profiles:
          Distribution:
          "appledeveloper.couchbase.com" type=Distribution

          ~buildbot/Desktop/appledeveloper.couchbase.com/profiles/ios/appledevelopercouchbasecom.mobileprovision

          Show
          plabee Phil Labee (Inactive) added a comment - - edited iOS Apps -------------- Certificates: Production: "Couchbase, Inc." type=iOS Distribution expires Aug 12, 2014 ~buildbot/Desktop/appledeveloper.couchbase.com/certs/ios/ios_distribution_appledeveloper.couchbase.com.cer Identifiers: App IDS: "Couchbase Server" id=com.couchbase.* Provisining Profiles: Distribution: "appledeveloper.couchbase.com" type=Distribution ~buildbot/Desktop/appledeveloper.couchbase.com/profiles/ios/appledevelopercouchbasecom.mobileprovision
          Hide
          plabee Phil Labee (Inactive) added a comment -

          Mac Apps
          --------------
          Certificates:
          Production:
          "Couchbase, Inc." type=Mac App Distribution (Aug,15,2014)
          "Couchbase, Inc." type=Developer ID installer (Aug,16,2014)
          "Couchbase, Inc." type=Developer ID Application (Aug,16,2014)
          "Couchbase, Inc." type=Mac App Distribution (Aug,15,2014)

          ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/mac_app_distribution.cer
          ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/developerID_installer.cer
          ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/developererID_application.cer
          ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/mac_app_distribution-2.cer

          Identifiers:
          App IDs:
          "Couchbase Server" id=couchbase.com.* Prefix=N2Q372V7W2
          "Coucbase Server adhoc" id=couchbase.com.* Prefix=N2Q372V7W2
          .

          Provisioning Profiles:
          Distribution:
          "appstore.couchbase.com" type=Distribution
          "Couchbase Server adhoc" type=Distribution

          ~buildbot/Desktop/appledeveloper.couchbase.com/profiles/appstorecouchbasecom.privisioningprofile
          ~buildbot/Desktop/appledeveloper.couchbase.com/profiles/Couchbase_Server_adhoc.privisioningprofile

          Show
          plabee Phil Labee (Inactive) added a comment - Mac Apps -------------- Certificates: Production: "Couchbase, Inc." type=Mac App Distribution (Aug,15,2014) "Couchbase, Inc." type=Developer ID installer (Aug,16,2014) "Couchbase, Inc." type=Developer ID Application (Aug,16,2014) "Couchbase, Inc." type=Mac App Distribution (Aug,15,2014) ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/mac_app_distribution.cer ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/developerID_installer.cer ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/developererID_application.cer ~buildbot/Desktop/appledeveloper.couchbase.com/certs/mac_app/mac_app_distribution-2.cer Identifiers: App IDs: "Couchbase Server" id=couchbase.com.* Prefix=N2Q372V7W2 "Coucbase Server adhoc" id=couchbase.com.* Prefix=N2Q372V7W2 . Provisioning Profiles: Distribution: "appstore.couchbase.com" type=Distribution "Couchbase Server adhoc" type=Distribution ~buildbot/Desktop/appledeveloper.couchbase.com/profiles/appstorecouchbasecom.privisioningprofile ~buildbot/Desktop/appledeveloper.couchbase.com/profiles/Couchbase_Server_adhoc.privisioningprofile
          Hide
          plabee Phil Labee (Inactive) added a comment -

          As of build 2.2.0-806 the app is signed by a new provisioning profile

          Show
          plabee Phil Labee (Inactive) added a comment - As of build 2.2.0-806 the app is signed by a new provisioning profile
          plabee Phil Labee (Inactive) made changes -
          Status In Progress [ 3 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          VERIFICATION STEPS Install version 2.2.0-806 on a macosx 10.8 machine that has never had Couchbase Server installed, which has the security setting to require applications to be signed with a developer ID.
          Hide
          plabee Phil Labee (Inactive) added a comment -

          Install version 2.2.0-806 on a macosx 10.8 machine that has never had Couchbase Server installed, which has the security setting to require applications to be signed with a developer ID.

          Show
          plabee Phil Labee (Inactive) added a comment - Install version 2.2.0-806 on a macosx 10.8 machine that has never had Couchbase Server installed, which has the security setting to require applications to be signed with a developer ID.
          Hide
          plabee Phil Labee (Inactive) added a comment -

          please assign to tester

          Show
          plabee Phil Labee (Inactive) added a comment - please assign to tester
          plabee Phil Labee (Inactive) made changes -
          Assignee Phil Labee [ plabee ] Maria McDuff [ maria ]
          Hide
          maria Maria McDuff (Inactive) added a comment -

          just tried this against newest build 809:
          still getting restriction message. see attached.

          Show
          maria Maria McDuff (Inactive) added a comment - just tried this against newest build 809: still getting restriction message. see attached.
          maria Maria McDuff (Inactive) made changes -
          Resolution Fixed [ 1 ]
          Status Resolved [ 5 ] Reopened [ 4 ]
          Assignee Maria McDuff [ maria ] Phil Labee [ plabee ]
          Hide
          maria Maria McDuff (Inactive) added a comment -

          restriction still exists.

          Show
          maria Maria McDuff (Inactive) added a comment - restriction still exists.
          maria Maria McDuff (Inactive) made changes -
          maria Maria McDuff (Inactive) made changes -
          Priority Blocker [ 1 ] Critical [ 2 ]
          Hide
          maria Maria McDuff (Inactive) added a comment -

          verified in rc1 (build 817). still not fixed. getting same msg:
          “Couchbase Server” can’t be opened because it is from an unidentified developer.
          Your security preferences allow installation of only apps from the Mac App Store and identified developers.

          Work Around:
          Step One
          Hold down the Control key and click the application icon. From the contextual menu choose Open.

          Step Two
          A popup will appear asking you to confirm this action. Click the Open button.

          Show
          maria Maria McDuff (Inactive) added a comment - verified in rc1 (build 817). still not fixed. getting same msg: “Couchbase Server” can’t be opened because it is from an unidentified developer. Your security preferences allow installation of only apps from the Mac App Store and identified developers. Work Around: Step One Hold down the Control key and click the application icon. From the contextual menu choose Open. Step Two A popup will appear asking you to confirm this action. Click the Open button.
          maria Maria McDuff (Inactive) made changes -
          Fix Version/s 3.0 [ 10414 ]
          Fix Version/s 2.2.0 [ 10620 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          Need to create new certificates to replace these that were revoked:

          Certificate: Mac Development
          Team Name: Couchbase, Inc.

          Certificate: Mac Installer Distribution
          Team Name: Couchbase, Inc.

          Certificate: iOS Development
          Team Name: Couchbase, Inc.

          Certificate: iOS Distribution
          Team Name: Couchbase, Inc.

          Show
          plabee Phil Labee (Inactive) added a comment - Need to create new certificates to replace these that were revoked: Certificate: Mac Development Team Name: Couchbase, Inc. Certificate: Mac Installer Distribution Team Name: Couchbase, Inc. Certificate: iOS Development Team Name: Couchbase, Inc. Certificate: iOS Distribution Team Name: Couchbase, Inc.
          wayne Wayne Siu made changes -
          Affects Version/s 2.2.0 [ 10620 ]
          wayne Wayne Siu made changes -
          Rank Ranked higher
          maria Maria McDuff (Inactive) made changes -
          Fix Version/s 2.2.1 [ 11101 ]
          Fix Version/s 3.0 [ 10414 ]
          maria Maria McDuff (Inactive) made changes -
          Priority Critical [ 2 ] Blocker [ 1 ]
          Hide
          maria Maria McDuff (Inactive) added a comment -

          candidate for 2.2.1 bug fix release.

          Show
          maria Maria McDuff (Inactive) added a comment - candidate for 2.2.1 bug fix release.
          wayne Wayne Siu made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Sept 23 [ 15, 35, 45 ]
          plabee Phil Labee (Inactive) made changes -
          Link This issue is duplicated by CBLT-104 [ CBLT-104 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Sept 23 [ 15, 35, 45 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Sept 30 [ 15, 35, 50 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked lower
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Sept 30 [ 15, 35, 50 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Sept 30 [ 15, 35, 50 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked lower
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Sept 30 [ 15, 35, 50 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct 07 [ 15, 35, 51 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct 07 [ 15, 35, 51 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          maria Maria McDuff (Inactive) made changes -
          Fix Version/s 3.0 [ 10414 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked lower
          wayne Wayne Siu made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct14 [ 15, 35, 53 ]
          wayne Wayne Siu made changes -
          Rank Ranked higher
          anil Anil Kumar made changes -
          Fix Version/s 2.5.0 [ 11200 ]
          Fix Version/s 2.2.1 [ 11101 ]
          Fix Version/s 3.0 [ 10414 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct14 [ 15, 35, 53 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked lower
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct 21 [ 15, 35, 56 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct 21 [ 15, 35, 56 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct 28 [ 15, 35, 57 ]
          Hide
          dipti Dipti Borkar added a comment -

          This is going to make it into 2.5? We seemed to keep differing it?

          Show
          dipti Dipti Borkar added a comment - This is going to make it into 2.5? We seemed to keep differing it?
          plabee Phil Labee (Inactive) made changes -
          Link This issue depends on MB-9437 [ MB-9437 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          cannot test changes with installer that fails

          Show
          plabee Phil Labee (Inactive) added a comment - cannot test changes with installer that fails
          plabee Phil Labee (Inactive) made changes -
          Status Reopened [ 4 ] In Progress [ 3 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Oct 28 [ 15, 35, 57 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 04 [ 15, 35, 59 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 04 [ 15, 35, 59 ] Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint [ 15, 35 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11 [ 15, 35, 65 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          Installed certs as buildbot and signed app with "(recommended) 3rd Party Mac Developer Application", producing

          http://factory.hq.couchbase.com//couchbase_server_2.5.0_MB-7250-001.zip

          Signed with "(Oct 30) 3rd Party Mac Developer Application: Couchbase, Inc. (N2Q372V7W2)", producing

          http://factory.hq.couchbase.com//couchbase_server_2.5.0_MB-7250-002.zip

          These zip files were made on the command line, not a result of the make command. They are 2.5G in size, so they obviously include mote than the zip files produced by the make command.

          Both versions of the app appear to be signed correctly!

          Note: cannot run make command from ssh session. Must Remote Desktop in and use terminal shell natively.

          Show
          plabee Phil Labee (Inactive) added a comment - Installed certs as buildbot and signed app with "(recommended) 3rd Party Mac Developer Application", producing http://factory.hq.couchbase.com//couchbase_server_2.5.0_MB-7250-001.zip Signed with "(Oct 30) 3rd Party Mac Developer Application: Couchbase, Inc. (N2Q372V7W2)", producing http://factory.hq.couchbase.com//couchbase_server_2.5.0_MB-7250-002.zip These zip files were made on the command line, not a result of the make command. They are 2.5G in size, so they obviously include mote than the zip files produced by the make command. Both versions of the app appear to be signed correctly! Note: cannot run make command from ssh session. Must Remote Desktop in and use terminal shell natively.
          Hide
          plabee Phil Labee (Inactive) added a comment -

          Finally, some progress: If the zip file is made using the --symlinks argument it appears to be un-signed. If the symlinked files are included, the app appears to be signed correctly.

          The zip file with symlinks is 60M, while the zip file with copies of the files is 2.5G, more than 40X the size.

          Show
          plabee Phil Labee (Inactive) added a comment - Finally, some progress: If the zip file is made using the --symlinks argument it appears to be un-signed. If the symlinked files are included, the app appears to be signed correctly. The zip file with symlinks is 60M, while the zip file with copies of the files is 2.5G, more than 40X the size.
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11 [ 15, 35, 65 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18 [ 15, 35, 65, 66 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked lower
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18 [ 15, 35, 65, 66 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11 [ 15, 35, 65 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11 [ 15, 35, 65 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18 [ 15, 35, 65, 66 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18 [ 15, 35, 65, 66 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27 [ 15, 35, 65, 66, 68 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          Fixed in 2.5.0-950

          Show
          plabee Phil Labee (Inactive) added a comment - Fixed in 2.5.0-950
          plabee Phil Labee (Inactive) made changes -
          Status In Progress [ 3 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          VERIFICATION STEPS Install version 2.2.0-806 on a macosx 10.8 machine that has never had Couchbase Server installed, which has the security setting to require applications to be signed with a developer ID. Install version 2.5.0-950 on a macosx 10.8 machine that has never had Couchbase Server installed, which has the security setting to require applications to be signed with a developer ID.
          dipti Dipti Borkar made changes -
          Assignee Phil Labee [ plabee ] Maria McDuff [ maria ]
          Hide
          dipti Dipti Borkar added a comment -

          Maria, can QE please verify this?

          Show
          dipti Dipti Borkar added a comment - Maria, can QE please verify this?
          Hide
          wayne Wayne Siu added a comment -

          Tested with build 2.5.0-950. Still see the warning box (attached).

          Show
          wayne Wayne Siu added a comment - Tested with build 2.5.0-950. Still see the warning box (attached).
          wayne Wayne Siu made changes -
          Attachment Build_2.5.0-950.png [ 18975 ]
          wayne Wayne Siu made changes -
          Resolution Fixed [ 1 ]
          Status Resolved [ 5 ] Reopened [ 4 ]
          Assignee Maria McDuff [ maria ] Phil Labee [ plabee ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27 [ 15, 35, 65, 66, 68 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02 [ 15, 35, 65, 66, 68, 70 ]
          plabee Phil Labee (Inactive) made changes -
          Status Reopened [ 4 ] In Progress [ 3 ]
          plabee Phil Labee (Inactive) made changes -
          Status In Progress [ 3 ] Open [ 1 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02 [ 15, 35, 65, 66, 68, 70 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09 [ 15, 35, 65, 66, 68, 70, 74 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13 [ 15, 35, 65, 66, 68, 70, 74 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19 [ 15, 35, 65, 66, 68, 70, 74, 75 ]
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19 [ 15, 35, 65, 66, 68, 70, 74, 75 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13 [ 15, 35, 65, 66, 68, 70, 74 ]
          wayne Wayne Siu made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13 [ 15, 35, 65, 66, 68, 70, 74 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19 [ 15, 35, 65, 66, 68, 70, 74, 75 ]
          wayne Wayne Siu made changes -
          Rank Ranked lower
          Hide
          wayne Wayne Siu added a comment -

          Phil,
          Can you give an update on this?

          Show
          wayne Wayne Siu added a comment - Phil, Can you give an update on this?
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19 [ 15, 35, 65, 66, 68, 70, 74, 75 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19, Week of Jan 06-10 [ 15, 35, 65, 66, 68, 70, 74, 75, 80 ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Story Points 5
          plabee Phil Labee (Inactive) made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19, Week of Jan 06-10 [ 15, 35, 65, 66, 68, 70, 74, 75, 80 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19, Week of Jan 06-10, Sprint 0 - 1/13 thru 1/24 [ 15, 35, 65, 66, 68, 70, 74, 75, 80, 84 ]
          Hide
          ashvinder Ashvinder Singh (Inactive) added a comment -

          I tested the code signature with apple utility "spctl -a -v /Applications/Couchbase\ Server.app/" and got the output :
          >>> /Applications/Couchbase Server.app/: a sealed resource is missing or invalid

          also tried running the command:

          bash: codesign -dvvvv /Applications/Couchbase\ Server.app
          >>>
          Executable=/Applications/Couchbase Server.app/Contents/MacOS/Couchbase Server
          Identifier=com.couchbase.couchbase-server
          Format=bundle with Mach-O thin (x86_64)
          CodeDirectory v=20100 size=639 flags=0x0(none) hashes=23+5 location=embedded
          Hash type=sha1 size=20
          CDHash=868e4659f4511facdf175b44a950b487fa790dc4
          Signature size=4355
          Authority=3rd Party Mac Developer Application: Couchbase, Inc. (N2Q372V7W2)
          Authority=Apple Worldwide Developer Relations Certification Authority
          Authority=Apple Root CA
          Signed Time=Jan 8, 2014, 10:59:16 AM
          Info.plist entries=31
          Sealed Resources version=1 rules=4 files=5723
          Internal requirements count=1 size=216

          It looks like the code signature is present but got invalid as the new file were added/modified to the project. I suggest for the build team to rebuild and add the code signature again.

          Show
          ashvinder Ashvinder Singh (Inactive) added a comment - I tested the code signature with apple utility "spctl -a -v /Applications/Couchbase\ Server.app/" and got the output : >>> /Applications/Couchbase Server.app/: a sealed resource is missing or invalid also tried running the command: bash: codesign -dvvvv /Applications/Couchbase\ Server.app >>> Executable=/Applications/Couchbase Server.app/Contents/MacOS/Couchbase Server Identifier=com.couchbase.couchbase-server Format=bundle with Mach-O thin (x86_64) CodeDirectory v=20100 size=639 flags=0x0(none) hashes=23+5 location=embedded Hash type=sha1 size=20 CDHash=868e4659f4511facdf175b44a950b487fa790dc4 Signature size=4355 Authority=3rd Party Mac Developer Application: Couchbase, Inc. (N2Q372V7W2) Authority=Apple Worldwide Developer Relations Certification Authority Authority=Apple Root CA Signed Time=Jan 8, 2014, 10:59:16 AM Info.plist entries=31 Sealed Resources version=1 rules=4 files=5723 Internal requirements count=1 size=216 It looks like the code signature is present but got invalid as the new file were added/modified to the project. I suggest for the build team to rebuild and add the code signature again.
          wayne Wayne Siu made changes -
          Fix Version/s 2.5.1 [ 11330 ]
          Fix Version/s 2.5.0 [ 11200 ]
          wayne Wayne Siu made changes -
          Assignee Phil Labee [ plabee ] Wayne Siu [ wayne ]
          anil Anil Kumar made changes -
          Fix Version/s 3.0 [ 10414 ]
          Fix Version/s 2.5.1 [ 11330 ]
          wayne Wayne Siu made changes -
          Priority Blocker [ 1 ] Critical [ 2 ]
          plabee Phil Labee (Inactive) made changes -
          Link This issue depends on CBD-1361 [ CBD-1361 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          need VM to clone for developer experimentation

          Show
          plabee Phil Labee (Inactive) added a comment - need VM to clone for developer experimentation
          plabee Phil Labee (Inactive) made changes -
          Link This issue is duplicated by CBLT-104 [ CBLT-104 ]
          plabee Phil Labee (Inactive) made changes -
          Link This issue relates to CBLT-104 [ CBLT-104 ]
          plabee Phil Labee (Inactive) made changes -
          Assignee Wayne Siu [ wayne ] Phil Labee [ plabee ]
          plabee Phil Labee (Inactive) made changes -
          Rank Ranked higher
          plabee Phil Labee (Inactive) made changes -
          Assignee Phil Labee [ plabee ] Wayne Siu [ wayne ]
          wayne Wayne Siu made changes -
          Priority Critical [ 2 ] Blocker [ 1 ]
          plabee Phil Labee (Inactive) made changes -
          Comment [ undo ]
          plabee Phil Labee (Inactive) made changes -
          Comment [ similar, but not the same ]
          Hide
          anil Anil Kumar added a comment -

          Any update on this? We need this for 3.0.0 GA.

          Please update the ticket.

          Triage - July 18th

          Show
          anil Anil Kumar added a comment - Any update on this? We need this for 3.0.0 GA. Please update the ticket. Triage - July 18th
          wayne Wayne Siu made changes -
          Sprint Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19, Week of Jan 06-10, Sprint 0 - 1/13 thru 1/24, Sprint 0 - 1/13 thru 1/24 [ 15, 35, 65, 66, 68, 70, 74, 75, 80, 84, 90 ] Build Team May 13th Sprint, Aug 23rd Sprint, Week of Nov 11, Week of Nov 18, Week of Nov 25-27, Week of Dec 02, Week of Dec 09-13, Week of Dec 16-19, Week of Jan 06-10, Sprint 0 - 1/13 thru 1/24, Sprint 0 - 1/13 thru 1/24, Build Sprint 9: 7/14 - 8/01 [ 15, 35, 65, 66, 68, 70, 74, 75, 80, 84, 90, 165 ]
          wayne Wayne Siu made changes -
          Rank Ranked higher
          wayne Wayne Siu made changes -
          Issue Type Improvement [ 4 ] Bug [ 1 ]
          Hide
          wayne Wayne Siu added a comment -

          Siri is helping to figure out what the next step is.

          Show
          wayne Wayne Siu added a comment - Siri is helping to figure out what the next step is.
          wayne Wayne Siu made changes -
          Affects Version/s 2.5.1 [ 11330 ]
          Affects Version/s 2.5.0 [ 11200 ]
          wayne Wayne Siu made changes -
          Component/s installer [ 10221 ]
          Hide
          anil Anil Kumar added a comment -

          Jens - Assigning as per Ravi's request.

          Show
          anil Anil Kumar added a comment - Jens - Assigning as per Ravi's request.
          anil Anil Kumar made changes -
          Assignee Wayne Siu [ wayne ] Jens Alfke [ jens ]
          Is this a Regression? Yes [ 10450 ]
          Hide
          ceej Chris Hillery added a comment -

          Jens requested assistance in setting up a MacOS development environment for building Couchbase. Phil (or maybe Siri?), can you help him with that?

          Show
          ceej Chris Hillery added a comment - Jens requested assistance in setting up a MacOS development environment for building Couchbase. Phil (or maybe Siri?), can you help him with that?
          Hide
          plabee Phil Labee (Inactive) added a comment -

          The production macosx builder has been cloned:

          10.6.2.159 macosx-x64-server-builder-01-clone

          if you want to use your own host, see:

          http://hub.internal.couchbase.com/confluence/display/CR/How+to+Setup+a+MacOSX+Server+Build+Node

          Show
          plabee Phil Labee (Inactive) added a comment - The production macosx builder has been cloned: 10.6.2.159 macosx-x64-server-builder-01-clone if you want to use your own host, see: http://hub.internal.couchbase.com/confluence/display/CR/How+to+Setup+a+MacOSX+Server+Build+Node
          Hide
          jens Jens Alfke added a comment -

          Here are the Apple docs on building apps signed with a Developer ID: https://developer.apple.com/library/mac/documentation/IDEs/Conceptual/AppDistributionGuide/DistributingApplicationsOutside/DistributingApplicationsOutside.html#//apple_ref/doc/uid/TP40012582-CH12-SW2

          I've got everything configured, but the build process fails at the final step, after I press the Distribute button in the Organizer window. I get a very uninformative error alert, "Code signing operation failed / Check that the identity you selected is valid."

          I've asked for help on the xcode-users mailing list. Blocked until I hear something back.

          Show
          jens Jens Alfke added a comment - Here are the Apple docs on building apps signed with a Developer ID: https://developer.apple.com/library/mac/documentation/IDEs/Conceptual/AppDistributionGuide/DistributingApplicationsOutside/DistributingApplicationsOutside.html#//apple_ref/doc/uid/TP40012582-CH12-SW2 I've got everything configured, but the build process fails at the final step, after I press the Distribute button in the Organizer window. I get a very uninformative error alert, "Code signing operation failed / Check that the identity you selected is valid." I've asked for help on the xcode-users mailing list. Blocked until I hear something back.
          Hide
          anil Anil Kumar added a comment -

          Triage - Not blocking 3.0 RC1

          Show
          anil Anil Kumar added a comment - Triage - Not blocking 3.0 RC1
          anil Anil Kumar made changes -
          Priority Blocker [ 1 ] Critical [ 2 ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          from Apple Developer mail list:

          Dear Developer,

          With the release of OS X Mavericks 10.9.5, the way that OS X recognizes signed apps will change. Signatures created with OS X Mountain Lion 10.8.5 or earlier (v1 signatures) will be obsoleted and Gatekeeper will no longer recognize them. Users may receive a Gatekeeper warning and will need to exempt your app to continue using it. To ensure your apps will run without warning on updated versions of OS X, they must be signed on OS X Mavericks 10.9 or later (v2 signatures).

          If you build code with an older version of OS X, use OS X Mavericks 10.9 or later to sign your app and create v2 signatures using the codesign tool. Structure your bundle according to the signature evaluation requirements for OS X Mavericks 10.9 or later. Considerations include:

          • Signed code should only be placed in directories where the system expects to find signed code.
          • Resources should not be located in directories where the system expects to find signed code.
          • The --resource-rules flag and ResourceRules.plist are not supported.

          Make sure your current and upcoming releases work properly with Gatekeeper by testing on OS X Mavericks 10.9.5 and OS X Yosemite 10.10 Developer Preview 5 or later. Apps signed with v2 signatures will work on older versions of OS X.

          For more details, read “Code Signing changes in OS X Mavericks” and “Changes in 
OS X 10.9.5 and Yosemite Developer Preview 5” in OS X Code Signing In Depth":

          http://c.apple.com/r?v=2&la=en&lc=us&a=EEjRsqZNfcheZauIAhlqmxVG35c6HJuf50mGu47LWEktoAjykEJp8UYqbgca3uWG&ct=AJ0T0e3y2W

          Best regards,
          Apple Developer Technical Support

          Show
          plabee Phil Labee (Inactive) added a comment - from Apple Developer mail list: Dear Developer, With the release of OS X Mavericks 10.9.5, the way that OS X recognizes signed apps will change. Signatures created with OS X Mountain Lion 10.8.5 or earlier (v1 signatures) will be obsoleted and Gatekeeper will no longer recognize them. Users may receive a Gatekeeper warning and will need to exempt your app to continue using it. To ensure your apps will run without warning on updated versions of OS X, they must be signed on OS X Mavericks 10.9 or later (v2 signatures). If you build code with an older version of OS X, use OS X Mavericks 10.9 or later to sign your app and create v2 signatures using the codesign tool. Structure your bundle according to the signature evaluation requirements for OS X Mavericks 10.9 or later. Considerations include: Signed code should only be placed in directories where the system expects to find signed code. Resources should not be located in directories where the system expects to find signed code. The --resource-rules flag and ResourceRules.plist are not supported. Make sure your current and upcoming releases work properly with Gatekeeper by testing on OS X Mavericks 10.9.5 and OS X Yosemite 10.10 Developer Preview 5 or later. Apps signed with v2 signatures will work on older versions of OS X. For more details, read “Code Signing changes in OS X Mavericks” and “Changes in 
OS X 10.9.5 and Yosemite Developer Preview 5” in OS X Code Signing In Depth": http://c.apple.com/r?v=2&la=en&lc=us&a=EEjRsqZNfcheZauIAhlqmxVG35c6HJuf50mGu47LWEktoAjykEJp8UYqbgca3uWG&ct=AJ0T0e3y2W Best regards, Apple Developer Technical Support
          plabee Phil Labee (Inactive) made changes -
          Is this a Regression? Yes [ 10450 ] No [ 10451 ]
          plabee Phil Labee (Inactive) made changes -
          Assignee Jens Alfke [ jens ] Phil Labee [ plabee ]
          Hide
          plabee Phil Labee (Inactive) added a comment -

          change to buildbot-internal to unlock keychain before running make and lock after:

          http://review.couchbase.org/#/c/41028/

          change to couchdbx-app to sign app, on dev branch "plabee/MB-7250":

          http://review.couchbase.org/#/c/41025/

          change to manifest to use this dev branch for 3.0.1 builds:

          http://review.couchbase.org/#/c/41026/

          Show
          plabee Phil Labee (Inactive) added a comment - change to buildbot-internal to unlock keychain before running make and lock after: http://review.couchbase.org/#/c/41028/ change to couchdbx-app to sign app, on dev branch "plabee/ MB-7250 ": http://review.couchbase.org/#/c/41025/ change to manifest to use this dev branch for 3.0.1 builds: http://review.couchbase.org/#/c/41026/
          wayne Wayne Siu made changes -
          Fix Version/s 3.0.1 [ 11934 ]
          Fix Version/s 3.0 [ 10414 ]
          Hide
          wayne Wayne Siu added a comment -

          Moving it to 3.0.1.

          Show
          wayne Wayne Siu added a comment - Moving it to 3.0.1.
          raju Raju Suravarjjala made changes -
          Priority Critical [ 2 ] Blocker [ 1 ]
          raju Raju Suravarjjala made changes -
          Affects Version/s 3.0 [ 10414 ]
          anil Anil Kumar made changes -
          Assignee Phil Labee [ plabee ] Wayne Siu [ wayne ]
          ceej Chris Hillery made changes -
          Link This issue is duplicated by MB-12345 [ MB-12345 ]
          wayne Wayne Siu made changes -
          Assignee Wayne Siu [ wayne ] Anil Kumar [ anil ]
          anil Anil Kumar made changes -
          Fix Version/s bug-backlog [ 11600 ]
          Fix Version/s 3.0.1 [ 11934 ]
          anil Anil Kumar made changes -
          Priority Blocker [ 1 ] Major [ 3 ]
          cihan Cihan Biyikoglu made changes -
          Fix Version/s 3.0.2 [ 12400 ]
          Fix Version/s bug-backlog [ 11600 ]
          cihan Cihan Biyikoglu made changes -
          Priority Major [ 3 ] Blocker [ 1 ]
          anil Anil Kumar made changes -
          Assignee Anil Kumar [ anil ] Chris Hillery [ ceej ]
          anil Anil Kumar made changes -
          Link This issue is duplicated by MB-12319 [ MB-12319 ]
          anil Anil Kumar made changes -
          Fix Version/s bug-backlog [ 11600 ]
          Fix Version/s 3.0.2 [ 12400 ]
          anil Anil Kumar made changes -
          Fix Version/s 3.0.2 [ 12400 ]
          Fix Version/s bug-backlog [ 11600 ]
          Component/s installer [ 10221 ]
          ceej Chris Hillery made changes -
          Status Open [ 1 ] In Progress [ 3 ]
          raju Raju Suravarjjala made changes -
          Fix Version/s 3.0.3 [ 12420 ]
          Fix Version/s 3.0.2 [ 12400 ]
          raju Raju Suravarjjala made changes -
          Fix Version/s 3.0.2 [ 12400 ]
          Fix Version/s 3.0.3 [ 12420 ]
          anil Anil Kumar made changes -
          Fix Version/s sherlock [ 12148 ]
          Fix Version/s 3.0.2 [ 12400 ]
          Hide
          michaelkwok Michael Kwok added a comment -

          I have a signed version that has been tested on 2 separate machines. It behaved as expected both times. Can somebody verify it's truly working? I uploaded to the link below.

          http://latestbuilds.hq.couchbase.com/3.0.2/codesigned/

          -Michael

          Show
          michaelkwok Michael Kwok added a comment - I have a signed version that has been tested on 2 separate machines. It behaved as expected both times. Can somebody verify it's truly working? I uploaded to the link below. http://latestbuilds.hq.couchbase.com/3.0.2/codesigned/ -Michael
          wayne Wayne Siu made changes -
          Fix Version/s 3.0.3 [ 12420 ]
          wayne Wayne Siu made changes -
          Assignee Chris Hillery [ ceej ] Wayne Siu [ wayne ]
          Hide
          wayne Wayne Siu added a comment -

          Michael,

          • Tested on Mavericks (10.9.5) and it works. The "unidentified developer" message did not pop up. Will test on an older version next.
          • Can you also push this fix to sherlock if it works?
          Show
          wayne Wayne Siu added a comment - Michael, Tested on Mavericks (10.9.5) and it works. The "unidentified developer" message did not pop up. Will test on an older version next. Can you also push this fix to sherlock if it works?
          Hide
          siri Sriram Melkote added a comment -

          It works for me on Mountain Lion, 10.8.2 - Yay!

          Show
          siri Sriram Melkote added a comment - It works for me on Mountain Lion, 10.8.2 - Yay!
          Hide
          michaelkwok Michael Kwok added a comment -

          Nice, it's also backward compatible as expected. Thanks for verifying. Currently, I can only do the signing manually from command line on my MacBook. We can work on moving to the server after I get everything backup.

          I just uploaded the signed version for Sherlock to the same location. Look for couchbase-server-enterprise_3.5.0-1289-macos.zip.

          Show
          michaelkwok Michael Kwok added a comment - Nice, it's also backward compatible as expected. Thanks for verifying. Currently, I can only do the signing manually from command line on my MacBook. We can work on moving to the server after I get everything backup. I just uploaded the signed version for Sherlock to the same location. Look for couchbase-server-enterprise_3.5.0-1289-macos.zip.
          wayne Wayne Siu made changes -
          Assignee Wayne Siu [ wayne ] Michael Kwok [ michaelkwok ]
          Hide
          michaelkwok Michael Kwok added a comment -

          We have the ability to sign a MAC OS X application for distribution outside of MAC App Store. Keep in mind this is strictly for MAC OS X signing. Apple has a different process for signing iOS and also distributing through MAC App Store. That's something we can tackle later when we get to it. It's not significantly different and also requires a few extra steps.

          Show
          michaelkwok Michael Kwok added a comment - We have the ability to sign a MAC OS X application for distribution outside of MAC App Store. Keep in mind this is strictly for MAC OS X signing. Apple has a different process for signing iOS and also distributing through MAC App Store. That's something we can tackle later when we get to it. It's not significantly different and also requires a few extra steps.
          michaelkwok Michael Kwok made changes -
          Status In Progress [ 3 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          james.mauss James Mauss made changes -
          Link This issue blocks MB-13544 [ MB-13544 ]
          ashvinder Ashvinder Singh (Inactive) made changes -
          Link This issue relates to MB-13762 [ MB-13762 ]

            People

            • Assignee:
              michaelkwok Michael Kwok
              Reporter:
              jchrisa J Chris Anderson [X] (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Agile

                  Gerrit Reviews

                  There are no open Gerrit changes