I got both issues with a fresh new certificate, so it was not just about the certificate being old.But I got around it by specifying the certificate by ID instead of name — first getting the ID via:security find-identity -p codesigningand, from the output of that, copying the long hex ID for the key I want, and pasting that into my codesign invocation:sudo codesign -s 001CA54450805B2D8D1646793D0339BA7EB931D1 --timestamp=none /opt/local/bin/ggdb
Topic:
Code Signing
SubTopic:
Certificates, Identifiers & Profiles
Tags: