Add timestamp to Mac installer code signing

Use the --timestamp option for 'productsign' to add a secure timestamp.

See: https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/resolving_common_notarization_issues

Signed-off-by: Michael Schuster <michael@schuster.ms>

diff --git a/admin/osx/create_mac.sh.cmake b/admin/osx/create_mac.sh.cmake
index 40b3e5796a328fd41948f6dd487cec2cf7657e28..b15405c1d8c1913a78ea75220487abf326583b83 100755 (executable)
--- a/admin/osx/create_mac.sh.cmake
+++ b/admin/osx/create_mac.sh.cmake
@@ -49,7 +49,7 @@ fi
 if [ ! -z "$identity" ]; then
        echo "Will try to sign the installer"
        pushd $install_path
-       productsign --sign "$identity" "$installer_file" "$installer_file.new"
+       productsign --timestamp --sign "$identity" "$installer_file" "$installer_file.new"
        mv "$installer_file".new "$installer_file"
        popd
 else