Binaries should be codesigned and notarized to avoid "X can’t be opened because it is from an unidentified developer" error

[arielelkin]

Just checking...

• This is a cardano-wallet bug.
• I am using the latest cardano-wallet release.
• I am using the correct cardano-node version for that release of cardano-wallet.

Version

6626489

Platform

macOS 11.6

Installation method

Binary from GitHub release page

Description

None of the macOS binaries work out of the box as they and their associated dylibs haven't been codesigned, which results in macOS's Gatekeeper preventing their execution and showing an error message

X can’t be opened because it is from an unidentified developer

Having to sudo, or right-click open, or changing Security settings on an ad-hoc basis for every single binary and dylib is not a viable solution. It's not aligned with platform standards, it's not user-friendly, and it's an unnecessary hurdle for novice programmers.

Please codesign binaries and associated dylibs.

IntersectMBO/cardano-node#3285

[piotr-iohk]

ADP-1215 added for tracking.

[Torhok9696]

Here is what I do after downloading a new update:

quarantine:
	$(foreach file, $(wildcard bin/*), xattr -d com.apple.quarantine $(file);)

[michalrus]

(As a side note, you could take binaries from Daedalus (Daedalus.app/Contents/MacOS/cardano-{node,wallet}), we do codesign and notarize each official release, including cardano-wallet, cardano-node etc.)

[arielelkin]

These workarounds shouldn't be needed, this repo's maintainers could follow best practices and appropriately codesign binaries they offer in GitHub releases.