Re: Code signing confusion
Re: Code signing confusion
- Subject: Re: Code signing confusion
- From: Ken Thomases <email@hidden>
- Date: Wed, 24 Oct 2012 08:09:06 -0500
On Oct 24, 2012, at 6:42 AM, Jon Hodgson wrote:
> ... my keychain currently has the
> following..
>
> 3rd Party Mac Developer Applicstiion
> - Mac App Submission
> 3rd Party Mac Developer Installer
> - Chris Dev Key
> Developer ID Installer
> - Chris Dev Key
> Mac Developer : Jonathan Hodgson
> - Jonathan Hodgson
In addition to "Developer ID Installer", you should have "Developer ID Application".
> So, on to signing
>
> If I try to use productsign on the installer packages with the "3rd
> Party Mac Developer Installer" certificate it tells me I need to use
> an application key because it's a bundle package, so try the same
> thing with "3rd Party Mac Applicstion" and it seems to work fine,
> check it with spctl and it seems to pass... so far so good.
The "3rd Party ..." certificates are for submitting to the App Store. You shouldn't be using those for distribution outside of the App Store. You want to use the "Developer ID ..." certificates for that. In particular, when signing an installer package you want to use the "Developer ID Installer" certificate.
> But with codesign things seem different. Codesign runs seemingly just
> fine, on both application bundles and individual binaries, and if I
> use codesign's own verify option it tells me it is both "valid on
> disk" and "satisfies its designated requirement"
>
> However if I check the result with spctl it's rejected every time ...
And for code-signing an application or other executable, you need to use the "Developer ID Application" certificate.
Tools Workflow Guide for Mac: Distributing Outside the Mac App Store
https://developer.apple.com/library/mac/#documentation/ToolsLanguages/Conceptual/OSXWorkflowGuide/DistributingApplicationsOutside/DistributingApplicationsOutside.html
Regards,
Ken
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Xcode-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden