title: macOS notarization error: "The signature algorithm used is too weak"
body: <p>I wonder if anyone's familiar with this error which only happens when I upload my apps to Apple for notarization:</p>
  
  <pre><code>"AppName.zip/AppName.app/Contents/Resources/EWSMacCompress.tar.gz/EWSMacCompress.tar/EWSMac.framework/Versions/A/EWSMac83886082"
  "The signature algorithm used is too weak."
  </code></pre>
  
  <p>Additional info:</p>
  
  <p>-I've been signing my apps for years with no issues. The error only happens when sending the apps for notarization.</p>
  
  <p>-I submitted a bug back in November 2018, provided Apple all the info they asked for - but it was never addressed further.</p>
  
  <p>-I recently contacted Apple again and they pointed me to some resource page that was last updated back in 2016. It briefly mentions a similar error - but still without any info on how to solve it:
  <a href="https://developer.apple.com/library/archive/technotes/tn2206/_index.html#//apple_ref/doc/uid/DTS40007919-CH1-TNTAG301" rel="noreferrer">https://developer.apple.com/library/archive/technotes/tn2206/_index.html#//apple_ref/doc/uid/DTS40007919-CH1-TNTAG301</a></p>
  
  <p>-A search on this error didn't produce anything useful.</p>
  
  <p>-The tar.gz file in question is an eSellerate licensing framework. As many people may know, it's been a popular licensing platform for Mac software for over a decade. While I switched to a different licensing platform some time ago, I still have thousands of customers with eSellerate licenses (as I'm sure is the situation with many other Mac developers).</p>
  
  <p>As far as I understand, this whole situation has to do something with signing files inside tar.gz archives - on which I couldn't find any info either</p>
  
  <p>Any help will be appreciated!</p>
  
  <p>Thanks,
  Leo</p>