Codesign an installer... stopped by Gatekeeper

I have built an installer (.pkg) for a signed application using PACKAGES. It works on 10.11 and the latest.

This installer had been signed using "codesign"...


When distributed the the .pkg when run causes Gatekeeper to display "unknown developer message"... we checked and everything is current.


Anyone run into this and fixed the problem? please share what you did to solve this. We are stuck. when we try to resign it responds that the installer is already signed.


Thanks.

Answered by yurchik1 in 224527022

Apple's documentation is at fault here... the correct format is


productsign --sign XXRD25C97 Test.pkg Test_Signed.pkg

That's right no quotes or string !!

SEE the thread "Not ready to admit I'm blind or stupid" for more details..

There are a couple of resources you can check to see if they cover your scenario. One is TN 2206:


developer.apple.com/library/content/technotes/tn2206/_index.html


If you go to the Installer Packages section, you'll see language that suggests it's no longer valid to distribute .pkg installers built in the old way. You'll have to carefully parse what it says to decide whether that applies to you.


You can also look here:


developer.apple.com/library/content/documentation/IDEs/Conceptual/AppDistributionGuide/DistributingApplicationsOutside/DistributingApplicationsOutside.html


to see that you've followed all the necessary steps. (Assuming that this document is still correct according to the rules laid down by TN 2206, which it may not be.)


If nothing else, you should try testing your package with spctl. You may get a more helpful error message out of that.

Thanks for the reply, but I have been through all of that... basically it does not work as described.. There has to be a work around.. or I am just not doing the process correctly. If its the latter then it would be nice to have someone tell what I could be doing wrong... preferably someone from within Apple who might know what is actually going on..


Once again thanks...

>this identity cannot be used for signing code


How many 'identities' do you have/teams are you on? How new is your paid Individual Developer Account?

Codesign an installer... stopped by Gatekeeper
 
 
Q