From bea001f46c5d1a82379fbcefc70d12c6bd0adfd3 Mon Sep 17 00:00:00 2001 From: Jon Morrow Date: Thu, 21 Nov 2019 09:07:59 -0800 Subject: Fixes all notarization issues This changes makes the neccessary changes to enable the pkg to pass apples notarization requirements. 1. Update omnibus and omnibus-software to versions that support deep signing 2. Drop 'Developer ID Installer:' from signing key. This lets sigining pick up the correct key for what is being signed. Signed-off-by: Jon Morrow --- omnibus/Gemfile | 4 ++-- omnibus/Gemfile.lock | 18 +++++++++--------- omnibus/config/projects/chef.rb | 2 +- 3 files changed, 12 insertions(+), 12 deletions(-) diff --git a/omnibus/Gemfile b/omnibus/Gemfile index 2a12aafccb..80a83e499d 100644 --- a/omnibus/Gemfile +++ b/omnibus/Gemfile @@ -1,7 +1,7 @@ source "https://rubygems.org" -gem "omnibus", git: "https://github.com/chef/omnibus", branch: "master" -gem "omnibus-software", git: "https://github.com/chef/omnibus-software", branch: "master" +gem "omnibus", git: "https://github.com/chef/omnibus", branch: "jm/deep_sign" +gem "omnibus-software", git: "https://github.com/chef/omnibus-software", branch: "jm/deep_sign_chef" gem "artifactory" gem "pedump" diff --git a/omnibus/Gemfile.lock b/omnibus/Gemfile.lock index ea8f2f32d9..a13d44fea6 100644 --- a/omnibus/Gemfile.lock +++ b/omnibus/Gemfile.lock @@ -1,9 +1,9 @@ GIT remote: https://github.com/chef/omnibus - revision: 9fbb95fd6636a034874e9a7e3a1a02e4c8b74c2f - branch: master + revision: 7c399ab1525ad7d18ddf442913b0f398613b28c9 + branch: jm/deep_sign specs: - omnibus (6.1.18) + omnibus (7.0.0) aws-sdk-s3 (~> 1) chef-cleanroom (~> 1.0) chef-sugar (>= 3.3) @@ -18,8 +18,8 @@ GIT GIT remote: https://github.com/chef/omnibus-software - revision: bed563eb2e1872ab02b5cdaee07b3ef42491fd85 - branch: master + revision: 4b6f674f7cde84191a93c2d0fe8910377e8eb056 + branch: jm/deep_sign_chef specs: omnibus-software (4.0.0) omnibus (>= 5.6.1) @@ -32,16 +32,16 @@ GEM artifactory (3.0.5) awesome_print (1.8.0) aws-eventstream (1.0.3) - aws-partitions (1.251.0) - aws-sdk-core (3.84.0) + aws-partitions (1.257.0) + aws-sdk-core (3.86.0) aws-eventstream (~> 1.0, >= 1.0.2) aws-partitions (~> 1, >= 1.239.0) aws-sigv4 (~> 1.1) jmespath (~> 1.0) - aws-sdk-kms (1.26.0) + aws-sdk-kms (1.27.0) aws-sdk-core (~> 3, >= 3.71.0) aws-sigv4 (~> 1.1) - aws-sdk-s3 (1.59.0) + aws-sdk-s3 (1.60.0) aws-sdk-core (~> 3, >= 3.83.0) aws-sdk-kms (~> 1) aws-sigv4 (~> 1.1) diff --git a/omnibus/config/projects/chef.rb b/omnibus/config/projects/chef.rb index 20c400c2f2..f585bfc76d 100644 --- a/omnibus/config/projects/chef.rb +++ b/omnibus/config/projects/chef.rb @@ -84,7 +84,7 @@ end proj_to_work_around_cleanroom = self package :pkg do identifier "com.getchef.pkg.#{proj_to_work_around_cleanroom.name}" - signing_identity "Developer ID Installer: Chef Software, Inc. (EU3VF8YLX2)" + signing_identity "Chef Software, Inc. (EU3VF8YLX2)" end compress :dmg -- cgit v1.2.1