External app signing with Python 3

Blue Cedar Mobile Client versions 4.10.8 and later are Python 3-based, as Python 2.x is no longer supported. Most of the implications of this upgrade are internal to Blue Cedar products. However, if you sign integrated apps with the Blue Cedar export for signing feature, the server where the signing scripts are executed must have Python 3 installed. 

When you have secured an app for external signing and included a signing profile, you export a zip file and sign the app outside the console. This zip file includes:

  • A copy of the secured app 
  • All information required to sign the app
  • A simple script (sign.sh) to run on a macOS signing server. 

The upgrade to Python 3 requires no other changes to the external signing process, other than having Python 3 and command line developer tools installed on the signing server.

Signing server requirements

Blue Cedar supports external (off-platform) code signing on macOS.

Requirements for a macOS server external to the Blue Cedar Platform.

  • To sign iOS apps on a machine running macOS 10.12+, you need:
    • Xcode 8.3.2+
    • Python 3.6+
    • Command line developer tools (these may be installed with Xcode or with Python 3)
    • Your code signing identity
  • To sign Android apps on a machine running macOS 10.12+, you also need:

Installing Python 3

Check whether you already have an up to date version of Python 3 installed by entering python3 in a command line window. If you see a response from a Python interpreter, it includes a version number in its initial display.

Python 3.7.3 (default, Apr 24 2020, 18:51:23) 
[Clang 11.0.3 (clang-1103.0.32.62)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> 


If you get a message that the python3 command requires the command line developer tools, click Install and accept the license. (Note that macOS Catalina (10.15) already includes Python 3, but you may still need to install the command line tools.)

If you need to install Python 3, download the latest version to install on the signing server: 

https://www.python.org/downloads/

https://wiki.python.org/moin/BeginnersGuide/Download


See the "Signing apps externally" documentation linked below to continue with code signing. 

Signing apps externally (Cloud Platform)

Signing apps externally (On-Premises Platform)

Sunsetting Python 2