OT: OS X codesigning best practise?

[Tiemo Hollmann TB]

Hello,

I am just trying the first time to codesign my app on OS X 10.9, the
certificate I bought already.

When using the command line codesign utility, it seems that I have to
codesign each .bundle and .app, which is included in my app first, before I
can codesign my app itself.

1.       Is this correct to do all codesignings as single steps, or is there
an option to codesign a complete package with all included components in one
step?

2.       Do codesigning tools like app wrapper do this job in one step, or
do I also have to sign all components myself?

3.       What about the owners rights? E.g.if my app contains the
revxml.bundle or another third party external and I would codesign this rev
bundle with my certificate, may I do this? If not, what is the alternative?

 

Thanks for your experience

Tiemo