Thanks,I read your post and hopefully understood most of it. As you imply, the the use of similar terminology to describe different things makes it a challenge to wrap your head around all of this. There is also a lot of information forums that appears to be disputed or out of date so I've tried to provide a detailed description of what I did next> I think I'm almost there but need a little more help getting over the line...
Thanks,
DC
If there are multiple posts in a row, the interface is rejecting my content and it is not clear which parts will submit
For "Developer ID Application", I found a private key on an older mac (under the keys tab of the keychain access app). I right-clicked on the private keychain and exported it as a .p12 file (it asked me to create a password). I copied the private key to a safe location and also downloaded it to my new machine (macbook 2021, Monterey) . I double clicked the .p12 file and appears to have installed.
To create a "Developer ID Installer" (I believe this is my 1st time doing this and ultimately what I need), I logged onto developer.apple.com , clicked on account tab, clicked on certificates, identifiers & profiles, clicked on 'certificates' in the left panel, Clicked on the '+' icon and performed the various steps to create an installer identity. Here is the latest status from security find-identity.
bash-3.2$ security find-identity ~/Library/Keychains/login.keychain-db
Policy: X.509 Basic
Matching identities
1) redacted-40-digit-code "Developer ID Application: Firstname Lastname (redacted)"
2) redacted-40-digit-code "Developer ID Installer: Firstname Lastname (redacted)"
2 identities found
Valid identities only
1) redacted-40-digit-code "Developer ID Application: Firstname Lastname (redacted)"
2) redacted-40-digit-code "Developer ID Installer: Firstname Lastname (redacted)"
2 valid identities found`
Note, I see the private keys in the keychain access app under the certificates and keys tab. I do not see any public keys in the same location but I read somewhere that the public keys are embedded in the certificates.
It is my understanding that I need to specify Developer ID Installer as I want to distribute a pkg outside of the app store. However, I show some of the command for Developer ID Application also:
Developer ID Installer:
% ant -buildfile buildWithJpackageAndSignInstaller.xml deploymacosx2022
Buildfile: /Users/dcaffrey/work/workspace/pfaat/trunk/pfaat/buildWithJpackageAndSignInstaller.xml
deploymacosx2022:
[echo] using jpackage at /Library/Java/JavaVirtualMachines/jdk-17.0.1.jdk/Contents/Home/bin/jpackage
[exec] java.io.IOException: Command [/usr/bin/codesign, --timestamp, --options, runtime, -s, Developer ID Installer: firstName lastName (redactedCode), --prefix, com.neogenesis.pfaat., -vvvv, --keychain, /Users/dcaffrey/Library/Keychains/login.keychain-db, /var/folders/rh/2slcpd4s0qn46fgfz32680_80000gn/T/jdk.jpackage4
