Enable hardened runtime when building MacOS packages as it is now required.

1 files changed, 4 insertions, 4 deletions

diff --git a/Installer/OSX/make-dmg.sh b/Installer/OSX/make-dmg.sh
index ca49275a0..a10ca9537 100644
--- a/Installer/OSX/make-dmg.sh
+++ b/Installer/OSX/make-dmg.sh
@@ -137,11 +137,11 @@ if [ "x${CODESIGN_IDENTITY}" != "x" ]; then
 
     # These files have dependencies, so we need to sign them in the correct order
     for file in "duplicati-cli" "duplicati-server" "uninstall.sh"; do
-        codesign -s "${CODESIGN_IDENTITY}" "Duplicati.app/Contents/MacOS/${file}"
+        codesign -f --options=runtime -s "${CODESIGN_IDENTITY}" "Duplicati.app/Contents/MacOS/${file}"
     done
 
     # Then sign the whole package
-    codesign -s "${CODESIGN_IDENTITY}" "Duplicati.app"
+    codesign -f --options=runtime -s "${CODESIGN_IDENTITY}" "Duplicati.app"
 else
     echo "No codesign identity supplied, skipping bundle signing"
 fi
@@ -229,9 +229,9 @@ rm -rf "$WC_DIR"
 
 if [ "x${CODESIGN_IDENTITY}" != "x" ]; then
     echo "Codesigning DMG image"
-    codesign -s "${CODESIGN_IDENTITY}" "${OUTPUT_DMG}"
+    codesign -f --options=runtime -s "${CODESIGN_IDENTITY}" "${OUTPUT_DMG}"
 else
     echo "No codesign identity supplied, skipping DMG signing"
 fi
 
-echo "Done, created ${OUTPUT_DMG}"
\ No newline at end of file
+echo "Done, created ${OUTPUT_DMG}"