On 15 Feb, 2014, at 11:16 pm, Michael Babin < email@hidden> wrote: On Feb 15, 2014, at 8:00 AM, Roland King < email@hidden> wrote: I've built a package, each component of which is signed, the package itself is signed with productsign and running pkgutil on it gives this However when I put this on a webserver and download it I get the "unknown developer" dialog and the package won't install. The application and both command-line tools inside are signed, the flat package installer is signed, pkgutil thinks it's signed and yet OSX won't deal with it. What else do I need to do? (and is this the right list?)
I believe the "3rd Party Mac Developer Installer" certificate is for the Mac App Store. If your intent is to create a package to be distributed by other means (not Mac App Store), then you want to sign with Developer ID certificates (Application/Installer).
How simple, thanks. I'd looked at all the certs I have and decided, incorrectly, Developer meant Mac Developer Program and 3rd Party meant .. 3rd Party, as in nothing to do with Apple. Wrongo. Switching them around all the way down the chain I now have a distributable package.
For the record, incase anyone stumbles on this thread later, an 'Identified Developer' package has a signature which verifies like this
Status: signed by a certificate trusted by Mac OS X Certificate Chain: 1. Developer ID Installer: Roland King SHA1 fingerprint: 7F D4 1D E2 4B D2 73 1B 8F 92 82 12 6B 72 F9 96 DB 84 8D 2F -----------------------------------------------------------------------------
Lastly for anyone distributing anything more complicated than a simple app (I have one package with two sub-packages, one optional, one not, one installing an app, the other command line tools) I cannot recommend Stephane Sudre's 'Packages' app highly enough. It's super easy to use, has every option at every stage I could possibly have wanted and was easy to integrate into a custom build step. No way would I have managed to do this without it, or at least not without spending weeks in the documentation. |