[tor-bugs] #30126 [Applications/Tor Browser]: Make Tor Browser on macOS compatible with Apple's notarization

[Tor Bug Tracker & Wiki]

#30126: Make Tor Browser on macOS compatible with Apple's notarization
------------------------------------------------+--------------------------
 Reporter:  gk                                  |          Owner:  tbb-team
     Type:  task                                |         Status:  new
 Priority:  Very High                           |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201909  |  Actual Points:
Parent ID:                                      |         Points:  2
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by gk):

 Hrm, okay. Let's first test whether my signing attempts now succeed by
 following your instructions closer (I think I messed up the stapling at
 least yesterday) and appease our Gatekeeper:

 https://people.torproject.org/~gk/testbuilds/TorBrowser-9.0a6-osx64_en-
 US_30126.dmg
 https://people.torproject.org/~gk/testbuilds/TorBrowser-9.0a6-osx64_en-
 US_30126.dmg.asc

 I then thought, testing with 8.5.5 as well because maybe the crash you saw
 is esr68-based. Here is the result:

 https://people.torproject.org/~gk/testbuilds/TorBrowser-8.5.5-osx64_en-
 US_30126.dmg
 https://people.torproject.org/~gk/testbuilds/TorBrowser-8.5.5-osx64_en-
 US_30126.dmg.asc

 Note: the latter is very surprising. macOS shows both for alpha and stable
 that Apple checked for malware and the notarization succeeded, however, we
 did not backport the build changes made in #31465 yet. Will be interesting
 to see what Catalina says.

 Regarding the crash there is
 https://bugzilla.mozilla.org/show_bug.cgi?id=1578075 which we might
 somehow hit? Although it would be kind of weird why starting from bash
 would avoid that.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30126#comment:53>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online