Ask HN: Are Golang binaries without Apple Dev acct possible?

2 pointsverdverm3 comments

I've been using GoReleaser to build and publish my Go binaries to GitHub. I tried installing the Mac on Catalina and hit the "untrusted developer" problem.

Is it possible to distribute these binaries without paying for and setting up code signing? Seems that 10.15 is more strict about these things.

Does the homebrew path get around this by building what you install locally?

View on HN

It seems like you can sign binaries with non-apple provided certificates:

https://developer.apple.com/library/archive/documentation/Se...

This github issue (https://github.com/goreleaser/goreleaser/issues/835) mentions: So, the sign pipe is supposed to be generic enough so it could be used with different signing mechanisms

Not tried this but it looks like its possible

Were you referring to the self-signed certificates?

These won't work when you want others to download your binary, which is what I am trying to do.

This looks like a good tutorial, combined with the links it has.

https://servicemax.com.au/tips/signing-and-notarising-a-mac-...

and also: https://www.kencochrane.com/2020/08/01/build-and-sign-golang...

Thanks, I'll give it a try this weekend and reply here with a more concrete answer

Reply on news.ycombinator.com