Hi,
I performed a lot of attempts to publish my application from Mojave and High Sierra. I succeeded one year ago but now, whatever I do, I get the two following error messages:
1- wrong package certificate
2- Info.plist : LSMinimumSystemVersion has the value '$minimumSystemVersion'
The problem is that both statements are wrong as stated by Apple's test tools (see below).
For that project i do not use Xcode but Application Loader instead.
Would you please help me solve these issues ?
All the best
Alain
Invalid Signature
--------------------
Apple >>This error occurs when you have signed your app's installer incorrectly. There are two certs required for this process: the "3rd Party Mac Developer Application" cert and the "3rd Party Mac Developer Installer" cert. When signing your package, you need to ensure that you are using the Installer cert to sign your package. Ensure that you are specifying this cert when submitting your app via the Xcode Organizer or when running productbuild from the command line.
I am using the following Terminal commands:
$ codesign -d --keychain /Users/filhol/Library/Keychains/login.keychain --entitlements Encyclopedia-player.entitlements --force --verbose -s "3rd Party Mac Developer Application: INSTITUT MAX VON LAUE - PAUL LANGEVIN (P65398CN49)" NeutronEncyclopedia.app/Contents/Resources/EncyclopediaPlayer.app
$ codesign -d --keychain /Users/filhol/Library/Keychains/login.keychain --entitlements NeutronEncyclopedia.entitlements --force --verbose -s "3rd Party Mac Developer Application: INSTITUT MAX VON LAUE - PAUL LANGEVIN (P65398CN49)" NeutronEncyclopedia.app
$ productbuild --component NeutronEncyclopedia.app /Applications NeutronEncyclopedia.pkg
$ productsign --sign "3rd Party Mac Developer Installer: INSTITUT MAX VON LAUE - PAUL LANGEVIN (P65398CN49)" --keychain ~/Library/Keychains/login.keychain NeutronEncyclopedia.pkg NeutronEncyclopediaSigned.pkg
According to <https://developer.apple.com/account/mac/certificate/> all my certificates are valids.
The tool pkgutil confirms that I do use the "3rd Party Mac Developer Installer" cert:
$ pkgutil --check-signature NeutronEncyclopediaSigned.pkg
Package "NeutronEncyclopediaSigned.pkg":
Status: signed by a developer certificate issued by Apple
Certificate Chain:
1. 3rd Party Mac Developer Installer: INSTITUT MAX VON LAUE - PAUL LANGEVIN (P65398CN49)
SHA1 fingerprint: 63 F5 1B 35 1B CE 9B 5E 3F 97 CD AE D1 D5 94 42 76 5C 32 65
-----------------------------------------------------------------------------
2. Apple Worldwide Developer Relations Certification Authority
SHA1 fingerprint: FF 67 97 79 3A 3C D7 98 DC 5B 2A BE F5 6F 73 ED C9 F8 3A 64
-----------------------------------------------------------------------------
3. Apple Root CA
SHA1 fingerprint: 61 1E 5B 66 2C 59 3A 08 FF 58 D1 4A E2 24 52 D1 98 DF 6C 60
So what is the problem ?
LSMinimumSystemVersion
-------------------------------
Apple >> The key LSMinimumSystemVersion in the Info.plist file has the value '$minimumSystemVersion', which is invalid. This string indicates the minimum version of macOS required for this application to run and must be of the form n.n.n where n is a number. For more information, see the Information Property List Key Reference.
Again I do not understand since the "Info.plist" file contains no '$minimumSystemVersion' but:
<key>LSMinimumSystemVersion</key>
<string>10.10.0</string>
The productbuild tool says:
productbuild: Supported OS versions: [10.10.0, )
So, again, what is the problem ?
I reply to myself.
I was using the wrong build version and I did not notice because the error message is not informational enough.
It only quotes the application name:
We identified one or more issues with a recent submission for your app, “NeutronEncyclopedia”. Please correct the following issues, then upload again.
This would have helped me a lot:
We identified one or more issues with a recent submission for your app, “NeutronEncyclopedia” build nber xxx uploaded xx/xx/xxxx. Please correct the following issues, then upload again.
Furthermore the procedure itself is misleading:
- each time a build is submitted the "Submit" button is greyed or suppressed
- a new build version is required for each new upload
Thus a dumb user like me may assume that a same build cannot be submitted twice.
Wrong! Each new build upload makes the "Submit" button reappear even if you forgot to select a build version not already submitted.
Many thanks to the staff of the iTunes Connect Support. They helped me a lot !