notarizing DMG fails - solved

[Phil Davis]

Thank you Matthias! Your tools make my life SO much easier! You have
done a great service for this community.

Phil Davis


On 5/5/21 2:20 AM, matthias rebbe via use-livecode wrote:
>> Am 05.05.2021 um 11:10 schrieb Tiemo via use-livecode <use-livecode at lists.runrev.com>:
>>
>> Thank you all for helping my lost soul in Apples notarizing nirvana
>>
>> Tiemo
>>
>> P.S.
>> Matthias, perhaps you want to add this in your great helpfile - without that it would have taken weeks for me!
>>
> I am currently working on it. ;) 
> First i will just add a note, but later, when i have more free time  i will enhance it to describe all more detailed.
>
> The Helper Stack will also get an update to support package installers. But it takes some time.
>
>
>
>> -----Ursprüngliche Nachricht-----
>> Von: use-livecode <use-livecode-bounces at lists.runrev.com> Im Auftrag von matthias rebbe via use-livecode
>> Gesendet: Mittwoch, 5. Mai 2021 10:31
>> An: How to use LiveCode <use-livecode at lists.runrev.com>
>> Cc: matthias_livecode_150811 at m-r-d.de
>> Betreff: Re: notarizing DMG fails
>>
>> Tiemo,
>>
>> i think i found the solution. I tried here myself and did als get the error "this identity cannot be used for signing code" when using the Developer ID Installer certificate for signing the .pkg.
>> According to Apple (see point 2)
>> https://help.apple.com/xcode/mac/current/#/deve51ce7c3d
>>
>> you have to use the tool productsign to sign the package installer. 
>>
>> So the syntax is like this
>>
>> productsign --sign <Your_Developer_Installer_ID> <Path_to_PKG>  <Path_where_the_signed_PKG_shall_be written>
>>
>> Example
>> productsign --sign "Developer ID Installer: Matthias Rebbe (xxxxxxxx)"  "/users/matthias/LC/builts/test/test.pkg" "/users/matthias/LC/builts/test/test_signed.pkg"
>>
>> After successful signing i got this messages in Terminal
>>
>> productsign: using timestamp authority for signature
>> productsign: signing product with identity "Developer ID Installer: Matthias Rebbe (xxxxxxxx)" from keychain /Users/matthias/Library/Keychains/login.keychain-db
>> productsign: adding certificate "Developer ID Certification Authority"
>> productsign: adding certificate "Apple Root CA"
>> productsign: Wrote signed product archive to /users/matthias/LC/builts/test/test_signed.pkg
>>
>>
>> Regards
>>
>> -
>> Matthias Rebbe
>> Life Is Too Short For Boring Code
>
> _______________________________________________
> use-livecode mailing list
> use-livecode at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode

-- 
Phil Davis
503-307-4363