static framework and code signing

Question

Created 5d

Replies 1

Boosts 0

Participants 2

Hello.

I am developing our company's SDK for iOS as a third-party library. This SDK consists of a static library and header files wrapped within a framework (and wrapping the target-specific frameworks in xcframework).

I understand that codesign is required even for static frameworks, is it correct?
Should I update the distributed files when the certificate expires? Does this depend on whether it is static or dynamic?
When is the signature verified?

Answer 1

DTS Engineer OP

Apple

3d

1- I understand that codesign is required even for static frameworks, is it correct?

No. It’s recommended, but not required.

2- Should I update the distributed files when the certificate expires? Does this depend on whether it is static or dynamic?

One of my colleagues has been researching this specific, so I’m going to ask them to chime in with the details.

3- When is the signature verified?

By Xcode at build time.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"