Need to unsign binary before signing it (#3018)

See ddev/signing_tools#10
ddev · May 20, 2021 · 4961432 · 4961432
1 parent 43b81fe
commit 4961432
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/master-build.yml b/.github/workflows/master-build.yml
@@ -106,6 +106,7 @@ jobs:
           if [ -z "${DDEV_MACOS_APP_PASSWORD}" ] ; then echo "DDEV_MACOS_APP_PASSWORD is empty"; exit 1; fi
           for item in .gotmp/bin/darwin*/ddev; do
             echo "Signing and notarizing ${item} ..."
+            codesign --remove-signature "${item}" || true
             curl -s https://raw.githubusercontent.com/drud/signing_tools/master/macos_sign.sh | bash -s -  --signing-password="${DDEV_MACOS_SIGNING_PASSWORD}" --cert-file=certfiles/ddev_developer_id_cert.p12 --cert-name="Developer ID Application: DRUD Technology, LLC (3BAN66AG5M)" --target-binary="${item}"
             curl -sSL -f https://raw.githubusercontent.com/drud/signing_tools/master/macos_notarize.sh | bash -s -  --app-specific-password=${DDEV_MACOS_APP_PASSWORD} --apple-id=accounts@drud.com --primary-bundle-id=com.ddev.ddev --target-binary="${item}"
           done