@jazuara
So Im having this issue even tho I'm using macOS Big Sur 11.6 & Xcode 13 (from the App
Store).
I created a dummy empty app with a watch app extension.
After building, archiving & creating the spa file. Only the iOS app has the right DER
hash slot (6 & 7), but the watch app does not have them.
I have added --generate-entitlement-der in Other Code Signing Flags and still does not
work.
Im archiving the release scheme of the app then distributing with the new provisioning
profiles (I have made sure they contain the new DER key).
I have reproduced this scenario locally except for I was using Xcode 12.5.1 on macOS Big Sur. I resolved it by adding the --generate-entitlement-der
flag to EACH of the build setting targets for Other Code Signing Flags
. So that means the watchOS build target and the watchOS extension build target. Then I build and signed each of these targets locally and then switched to the outer app and built and signed that target. I then exported the app as an Ad-Hoc build for testing and was able to break it open and see the DER hash slot (-7) on each of the executables:
$ codesign -dvvvvv watchApp.app
If that does not work then you will still need to resign somehow for installation on iOS 15 and watchOS 8. My first recommendation would be to try update your version of Xcode to Xcode 13.1 on Big Sur. Next, you could also try the same test project on Xcode 13 with macOS Monterey. If none of those options work, then you will need to re-sign by hand.
@OliverTrifork
Regarding:
The issue (that we were having) seems to be have been fixed with Xcode 13.1. Our build server which is running mac OS 11.5.2, updated Xcode to 13.1 yesterday, and now our .ipa are being properly signed.
Glad the issue you were seeing is now resolved. I see that you followed up on (FB9661051), and this would be the best place to get more information. From what I can tell the core of this fix was to remove the need to add in the flag for --generate-entitlement-der
to the Other Code Signing Flags
.
Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com
..