Fix hard notarisation failures.

pkg/mac/build.sh

@@ -152,6 +152,10 @@ _build_runtime() {
     make clean
     ${QMAKE} || { echo qmake failed; exit 1; }
     make || { echo make failed; exit 1; }
+    # Hack to pass notarization due to name change between app and binary
+    if [ -f pgAdmin4.app/Contents/MacOS/pgAdmin4 ]; then
+        mv pgAdmin4.app/Contents/MacOS/pgAdmin4 "pgAdmin4.app/Contents/MacOS/${APP_NAME}"
+    fi
     cp -r pgAdmin4.app "${BUILDROOT}/${APP_BUNDLE_NAME}"
 }
 

pkg/mac/codesign-binaries.sh

@@ -25,13 +25,13 @@ for i in $(find "${BUNDLE}" -type f)
 do
 	file "${i}" | grep -E "Mach-O executable|Mach-O 64-bit executable|Mach-O 64-bit bundle"
 	if [ $? -eq 0 ] ; then
-		codesign --deep -f -i "${DEVELOPER_BUNDLE_ID}" -s "${DEVELOPER_ID}" --options runtime ${i}
+		codesign --deep --verify --verbose --timestamp --options runtime -i "${DEVELOPER_BUNDLE_ID" --sign "${DEVELOPER_ID}" "$"
 	fi
 done
 
 echo Signing ${BUNDLE} libraries
 for i in $(find "${BUNDLE}" -type f -name "*.dylib*")
 do
-	codesign --deep -f -i "${DEVELOPER_BUNDLE_ID}" -s "${DEVELOPER_ID}" --options runtime ${i}
+	codesign --deep --verify --verbose --timestamp --options runtime -i "${DEVELOPER_BUNDLE_ID" --sign "${DEVELOPER_ID}" "$"
 done
 

pkg/mac/codesign-bundle.sh

@@ -12,7 +12,7 @@ source codesign.conf
 
 # Sign the .app
 echo Signing ${BUNDLE}
-codesign --sign "${DEVELOPER_ID}" --verbose --deep --force "${BUNDLE}"
+codesign --sign "${DEVELOPER_ID}" --timestamp --verbose --deep --force "${BUNDLE}"
 
 # Verify it worked
 echo Verifying the signature

pkg/mac/codesign-dmg.sh

@@ -16,7 +16,7 @@ SCRIPT_DIR=`pwd`
 
 # Sign the .app
 echo Signing ${DMG_IMAGE}
-codesign --sign "${DEVELOPER_ID}" --verbose --force "${DMG_IMAGE}"
+codesign --sign "${DEVELOPER_ID}" --timestamp --verbose --force "${DMG_IMAGE}"
 
 # Verify it worked
 echo Verifying the signature