[MacPorts] #53168: Python Frameworks not codesigned in MacOS Sierra

[MacPorts]

#53168: Python Frameworks not codesigned in MacOS Sierra
----------------------------------------------------+--------------------
 Reporter:  tcwan                                   |      Owner:
     Type:  defect                                  |     Status:  new
 Priority:  Normal                                  |  Milestone:
Component:  ports                                   |    Version:  2.3.5
 Keywords:  codesign incoming connections firewall  |       Port:  python
----------------------------------------------------+--------------------
 I am using a python app which opens a listening socket for network
 connections, which is intercepted by the MacOS Firewall with the
 permission dialog "XXX accept incoming connections?" each time the app is
 executed.

 The reason for this behavior is due to the Python Frameworks not having a
 valid signature

 {{{
 $ codesign -vvv
 /opt/local/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app
 /opt/local/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app:
 code object is not signed at all
 In architecture: x86_64
 }}}

 To overcome this, the python framework(s) should be codesigned after
 installation.

 {{{
 $sudo codesign -f -s -
 /opt/local/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app
 }}}

 Note the '-' after -s is needed to force codesign to use an ad hoc
 signature.

 After codesigning, the following output is seen:

 {{{
 $ codesign -vvv
 /opt/local/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app
 /opt/local/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app:
 valid on disk
 /opt/local/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app:
 satisfies its Designated Requirement
 }}}

--
Ticket URL: <https://trac.macports.org/ticket/53168>
MacPorts <https://www.macports.org/>
Ports system for macOS