Certificate Status for Development ID Installer id 'invalid extended key usage'

App & System Services General
CDSTeam OP
Created Sep ’20
Replies 10
Boosts 0
Views 1.3k
Participants 2
I am new to apple signing process, I have downloaded both Developer ID Application and Developer ID Installer certificates from Apple.developer.com and i am not able to sing my software package successfully, it is saying rejected while checking signature. So after evaluating certificates i have found Developer ID Installer status is Invalid where as Developer ID Application is valid.

Kindly let me know how to fix this issue and sign my package successfully.

Regards
Milan
Answered by CDSTeam in 631756022
As per my understanding notarization will be done after the code signing! so for us step one is only failing. But when we tried to sign the same package with different apple ID we were able to sign it successfully. hence we would like to understand the cause of rejection with current apple ID.
Thanks in advance
Replies  10
Boosts  0
Views  1.3k
Participants  2
DTS Engineer OP
Apple
Sep ’20

i am not able to sing my software package successfully

What sort of “software package” are you trying to sign? An Apple installer package (.pkg)? Or something else?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
0
CDSTeam OP
Sep ’20
Yes we are trying to sign Apple Installer package(.pkg) file.

Command : spctl -vvv --assess --type install /Users/Maor/Desktop/Optitex\ 3DDIsign.pkg
Response :
/Users/Maor/Desktop/Optitex 3DDIsign.pkg: rejected
source=Unnotarized Developer ID
origin=Developer ID Installer: Optitex Ltd (<ID>)
0
DTS Engineer OP
Apple
Sep ’20 
Code Block  
`/Users/Maor/Desktop/Optitex 3DDIsign.pkg: rejected`
`source=Unnotarized Developer ID`


Did you notarise your installer package? If not, the above is exactly what I’d expect to see.

For more on notarisation, see:
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
0
CDSTeam OP
Sep ’20
Accepted Answer
As per my understanding notarization will be done after the code signing! so for us step one is only failing. But when we tried to sign the same package with different apple ID we were able to sign it successfully. hence we would like to understand the cause of rejection with current apple ID.
Thanks in advance
1
DTS Engineer OP
Apple
Sep ’20

hence we would like to understand the cause of rejection with current
apple ID.

Honestly, I’m super confused by your explanation of this issue. Let’s go back to the start: What command are you running? And how is it failing?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
0
CDSTeam OP
Sep ’20
Sorry for confusions!!

What command are you running? And how is it failing?

we have .pkg files and we are running following command
Code Block 
spctl -vvv --assess --type install /Users/Maor/Desktop/Optitex\ 3DDIsign.pkg

we are getting below response 
Code Block 
/Users/Maor/Desktop/Optitex 3DDIsign.pkg: rejected
source=Unnotarized Developer ID
origin=Developer ID Installer: Optitex Ltd (<ID>)

But when we tried to sign the same .pkg file using our different Developer ID we are able to sign successfully without rejection.



0
DTS Engineer OP
Apple
Sep ’20

we are getting below response

Did you notarise Optitex 3DDIsign.pkg after signing it?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
0
DTS Engineer OP
Apple
Sep ’20
Oh, one other thing: I think it’d be valuable for me to take a look at your whole signing and notarisation process. Alas, I don’t have the time to do that here in DevForums. If you’d like more in-depth help with this, open a DTS tech support incident and we can pick things up there.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
0
CDSTeam OP
Sep ’20
Yes we have created the DTS tech support ticket with ID 101184202224.
0
DTS Engineer OP
Apple
Sep ’20

Yes we have created the DTS tech support ticket with ID 101184202224.

That is not a DTS tech support incident (TSI) number. It looks like a number from the incident tracking system used by Apple Developer Programs Support. They will not, alas, be able to help you with technical issues.

DTS TSI numbers currently look like 7nnnnnnnn, where n is a digit.

The page I referenced in my previous post has instructions on how to submit a TSI (in the How to Submit a TSI section).

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
0
Certificate Status for Development ID Installer id 'invalid extended key usage'
First post date Last post date
 
 
Q