Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Invalid
Priority: P2: Important
Fix Version/s: None
Affects Version/s: 6.5.2
Component/s: WebEngine
Labels:
None

Platform/s:

macOS
Commits:
ea52b98ec (dev), 79608ad27 (6.6), 919dceb72 (6.5)

Description

I'm trying to sign my application which embed the WebEngine library.

The following instructions are working with Qt 5.15.2, Qt 6.3.2 and Qt 6.4.3, but not with Qt 6.5.2

sudo codesign --force --deep -o runtime --timestamp --entitlements <path_to_entitlements>/Entitlements.plist --verbose=4 -s <identity> --digest-algorithm=sha1,sha256 MyApp.app

sudo codesign --force --deep -o runtime --timestamp --entitlements <path_to_entitlements>/WebEngineEntitlements.plist --verbose=4 -s <identity> --digest-algorithm=sha1,sha256 MyApp.app/Contents/Frameworks/QtWebEngineCore.framework/Helpers/QtWebEngineProcess.app/Contents/MacOS/QtWebEngineProcess"

Here's what the entitlements contain :

MyApp entitlements

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.automation.apple-events</key>
    <true/>
    <key>com.apple.security.cs.disable-library-validation</key>
    <true/>
    <key>com.apple.security.device.audio-input</key>
    <true/>
    <key>com.apple.security.device.camera</key>
    <true/>
</dict>
</plist>

WebEngine entitlements

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.cs.disable-executable-page-protection</key>
    <true/>
</dict>
</plist>

With Qt 6.5.2, codesign itself is executed correctly, and doesn't return anything special compared to when app is built with previously cited version of Qt.

If I run the app before signing my Qt-6.5.2-based app , the WebEngine is running correctly, but after signing, it cannot even render a single page (Render process exited with code: 5. Do you want reload the page ?)

I tried multiple things proposed on this Qt Forum thread, without especially understanding why it would work, and it didn't.