macOS notarization failed

[molnard]

General Description

I was about to publish our newest silent release v1.1.10.3. During the macOS notarization process, I got some new errors that were not there before. So apple changed something. I have to figure out their new "standard". Until that, I have to postpone the Silent Release.

Logs

{
"logFormatVersion": 1,
"jobId": "48d6cd96-6e7a-4d45-96d5-d66cee85b51c",
"status": "Invalid",
"statusSummary": "Archive contains critical validation errors",
"statusCode": 4000,
"archiveFilename": "Wasabi-1.1.10.3.zip",
"uploadDate": "2020-03-02T18:46:28Z",
"sha256": "a09c543013f94d8d9e499b663793ccfbb42185a69d460e751b432da27c055b10",
"ticketContents": null,
"issues": [
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/tor.real",
"message": "The signature algorithm used is too weak.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/tor.real",
"message": "The signature does not include a secure timestamp.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/tor.real",
"message": "The executable does not have the hardened runtime enabled.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/tor.real",
"message": "The binary uses an SDK older than the 10.9 SDK.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/libevent-2.1.6.dylib",
"message": "The signature algorithm used is too weak.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/libevent-2.1.6.dylib",
"message": "The signature does not include a secure timestamp.",
"docUrl": null,
"architecture": "x86_64"
},
{
"severity": "error",
"code": null,
"path": "Wasabi-1.1.10.3.zip/Wasabi Wallet.app/Contents/MacOS/TorDaemons/tor-osx64.zip/Tor/libevent-2.1.6.dylib",
"message": "The binary uses an SDK older than the 10.9 SDK.",
"docUrl": null,
"architecture": "x86_64"
}
]
}

Wasabi Version

backend branch

[yahiheb]

#3189 fixed this, so closing.