[tor-bugs] #30126 [Applications/Tor Browser]: Make Tor Browser on macOS compatible with Apple's notarization

[Tor Bug Tracker & Wiki]

#30126: Make Tor Browser on macOS compatible with Apple's notarization
------------------------------------------------+--------------------------
 Reporter:  gk                                  |          Owner:  tbb-team
     Type:  task                                |         Status:  new
 Priority:  Very High                           |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201907  |  Actual Points:
Parent ID:                                      |         Points:
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by mcs):

 Replying to [comment:26 gk]:
 > Alright: mcs/brade: could you give
 >
 > https://people.torproject.org/~gk/testbuilds/TorBrowser-tbb-nightly-
 30126_3-osx64_en-US.dmg
 > https://people.torproject.org/~gk/testbuilds/TorBrowser-tbb-nightly-
 30126_3-osx64_en-US.dmg.asc
 >
 > a round of testing? I think I've fixed all the blockers for notarization
 in our build system now. making sure the whole bundle is still running
 (even on a system < 10.11) would be neat as well. :)

 The good news is that the notarization process works with that build.

 I am not sure it matters, but the following three files have different min
 OS version and SDK values in their mach-o headers:
  Tor Browser.app/Contents/MacOS/Tor/PluggableTransports/meek-client
  Tor Browser.app/Contents/MacOS/Tor/PluggableTransports/meek-client-
 torbrowser
  Tor Browser.app/Contents/MacOS/Tor/PluggableTransports/obfs4proxy
 While all other binaries have min OS version 10.7 and SDK 10.11, the above
 three files have 10.9 and 10.9.

 We did find one blocker though: when we tested on a macOS 10.9.x system we
 experienced #26876 again. Since Tor Browser 9.0a4 does not have this
 problem, there must besome difference in how `tor.real` is built for your
 test builds.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30126#comment:27>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online