notarizing DMG fails - solved

[matthias_livecode_150811 at m-r-d.de]

> Am 05.05.2021 um 11:10 schrieb Tiemo via use-livecode <use-livecode at lists.runrev.com>:
> 
> Thank you all for helping my lost soul in Apples notarizing nirvana
> 
> Tiemo
> 
> P.S.
> Matthias, perhaps you want to add this in your great helpfile - without that it would have taken weeks for me!
> 
I am currently working on it. ;) 
First i will just add a note, but later, when i have more free time  i will enhance it to describe all more detailed.

The Helper Stack will also get an update to support package installers. But it takes some time.



> 
> -----Ursprüngliche Nachricht-----
> Von: use-livecode <use-livecode-bounces at lists.runrev.com> Im Auftrag von matthias rebbe via use-livecode
> Gesendet: Mittwoch, 5. Mai 2021 10:31
> An: How to use LiveCode <use-livecode at lists.runrev.com>
> Cc: matthias_livecode_150811 at m-r-d.de
> Betreff: Re: notarizing DMG fails
> 
> Tiemo,
> 
> i think i found the solution. I tried here myself and did als get the error "this identity cannot be used for signing code" when using the Developer ID Installer certificate for signing the .pkg.
> According to Apple (see point 2)
> https://help.apple.com/xcode/mac/current/#/deve51ce7c3d
> 
> you have to use the tool productsign to sign the package installer. 
> 
> So the syntax is like this
> 
> productsign --sign <Your_Developer_Installer_ID> <Path_to_PKG>  <Path_where_the_signed_PKG_shall_be written>
> 
> Example
> productsign --sign "Developer ID Installer: Matthias Rebbe (xxxxxxxx)"  "/users/matthias/LC/builts/test/test.pkg" "/users/matthias/LC/builts/test/test_signed.pkg"
> 
> After successful signing i got this messages in Terminal
> 
> productsign: using timestamp authority for signature
> productsign: signing product with identity "Developer ID Installer: Matthias Rebbe (xxxxxxxx)" from keychain /Users/matthias/Library/Keychains/login.keychain-db
> productsign: adding certificate "Developer ID Certification Authority"
> productsign: adding certificate "Apple Root CA"
> productsign: Wrote signed product archive to /users/matthias/LC/builts/test/test_signed.pkg
> 
> 
> Regards
> 
> -
> Matthias Rebbe
> Life Is Too Short For Boring Code