Signing Certificates

RSS for tag

A signing certificate is a digital identity used for code signing during the build and archive process.

Signing Certificates Documentation

Pinned Posts

Posts under Signing Certificates tag

153 Posts
Sort by:
Post not yet marked as solved
10 Replies
8.1k Views
(I posted this in the "Distribution >> App Submission and Review" forum 2 days ago but it has not received a response. Trying here...)I had to rebuild my iMac a few months ago and I restored from my Time Machine backup.I now need to make a change to an app but what used to compile without error is now failing at the codesign step with:Signing Identity: "-"As far as I can see, all of the account profiles are valid with expiry dates in the future. The only 'odd' thing is that some have a 'Download' button in the 'Action' column of the 'Provisioning Profiles' seciotn of the account details - when I select the "Download All Profiles" button, they turn grey but never seem to download or disappear (even after aiting for several hours!). Looking at the 'developer' web page, all of my certificates and provisioning profiles are all active.Any ideas welcomedThanksSusan
Posted
by
Post not yet marked as solved
31 Replies
117k Views
Hi,my apps run on the iOSSimulator without problems and used to run on devices as well, but after updating to latest XCode-Version I am getting the above error message when trying to run an app on my iPhone 7. It says :"codesign wants to access key "access" in your bunch of keys . To allow this enter your password".... but my apple-Developer-ID-Password doesn't work. And until updating to latest XCode-Version I never had any problems with codesign when running an app on iPhone device.Any hints what's going wrong ?XCode Version 9.1 (9B55)iOS Version 11.1.2 (15B202)Latest High Sierra Version, macbook Pro 2015
Posted
by
Post not yet marked as solved
1 Replies
1.6k Views
I have an app at App Store from past two years, now I want to update that app with my recently created new version app for iOS11+ support.My old app has different Xcode project and new app with different. in this case, xcode says to me keep a unique bundle id. So how can I update my old app with a new Xcode project, with the same bundle id...
Posted
by
Post not yet marked as solved
1 Replies
591 Views
I hope the pending antitrust suits force Apple to allow us to sign and provision our own apps for more than a week. For the price paid I should be able to write my own apps and use them without restriction outside of Apple services such as iCloud and so on. I understand distribution restrictions but please kill that 1 week annoyance, give me some level of freedom over my own apps on my own device. Or I hope it’s forced. Cheers and Thanks in advance.
Posted
by
Post not yet marked as solved
47 Replies
93k Views
To support an older version of an iOS app, I needed to install Mojave with Xcode 9. I create a CSR and from there generate an iOS Distribution certificate online, which I download and double click to install in Keychain. However, when viewing in Keychain, it shows in red "iPhone Distribution: CompanyName certificate is not trusted". I'm not sure what I'm doing wrong as I follow the instructions to the T and have done this in the past with success. NOTE: I tried this with Sierra as well and got the same issue. It only seems to work on Catalina, which doesn't help me because I need an older version of Xcode.
Posted
by
Post marked as solved
2 Replies
8.0k Views
I am trying to implement sign in with apple with firebase. I cannot get around an issue where I get the following error when attempting a sign in: When running: Auth.auth().signIn(with: credential) { (authResult, error) in I get: nil credential = OAuthProvider.credential Optional(Error Domain=FIRAuthErrorDomain Code=17004 "The audience in ID Token [com.name.app] does not match the expected audience." UserInfo={NSLocalizedDescription=The audience in ID Token [com.name.app] does not match the expected audience., FIRAuthErrorUserInfoNameKey=ERROR_INVALID_CREDENTIAL}) Optional("The audience in ID Token [com.name.app] does not match the expected audience.") I have added my URL as stated on firebase to my identifier. To complete set up, add this authorization callback URL to your app configuration in the Apple Developer Console. Additional steps may be needed to verify ownership of this web domain to Apple.  More code: func authorizationController(controller: ASAuthorizationController, didCompleteWithAuthorization authorization: ASAuthorization) {   if let appleIDCredential = authorization.credential as? ASAuthorizationAppleIDCredential {    guard let nonce = currentNonce else {     fatalError("Invalid state: A login callback was received, but no login request was sent.")    }    guard let appleIDToken = appleIDCredential.identityToken else {     print("Unable to fetch identity token")     return    }    guard let idTokenString = String(data: appleIDToken, encoding: .utf8) else {     print("Unable to serialize token string from data: \(appleIDToken.debugDescription)")     return    }           print("credential = OAuthProvider.credential")    // Initialize a Firebase credential.    let credential = OAuthProvider.credential(withProviderID: "apple.com",                         idToken: idTokenString,                       rawNonce: nonce)     //Auth.auth().createUser(withEmail: T##String, password: T##String, completion: T##AuthDataResultCallback?##AuthDataResultCallback?##(AuthDataResult?, Error?) -> Void)    // Sign in with Firebase.    Auth.auth().signIn(with: credential) { (authResult, error) in           print(Auth.auth().currentUser?.uid ," credential = OAuthProvider.credential ", error)
Posted
by
Post not yet marked as solved
4 Replies
1.2k Views
I'm trying to generate a Pass Type certificate. In my request, I specifically specify the hash type as Sha256. However, when upload the request file, and generate the certificate on the apple developer site, the cer file states it is SHA1 (which has been depreciated). Any help would be greatly appreciated.
Posted
by
Post not yet marked as solved
6 Replies
6.5k Views
Trying to validate an app for upload to mac app store. Using Big Sur, and Xcode 12.2 App will not validate. This is for an existing app I'm trying to update. It updated peffectly week just 2 weeks ago with Xocode 11.xx and Catalina. It was rejected a week ago for metadata concerns. I've corrected metadata concerns, and am trying to submit a new binary. I've tried validating the same bundle with a diffreent app id, and everything goes prefectly and is validated. Here is what the non-validation looks like: SUMMARY Team: XXXXXXX Certificate: Apple Distribution (Expires 10/31/21) Profile: Mac Team Store Provisioning Profile: com.XXXX.XXXX Symbols: Included Architectures: Intel 64-bit ENTITLEMENTS com.apple.security.files.user-selected.read-write true com.apple.application-identifier XXXX.com.XXXX.XXXX com.apple.developer.team-identifier XXXXXXXX com.apple.security.app-sandbox true ****** The result = Not Validated * Error message Xcode displayed. Unable to process application at this time due to the following error: Invalid Provisioning Profile. The provisioning profile included in the bundle com.XXXX.XXXX [com.XXXX.XXXX.pkg/Payload/XXXXYYYY.app] is invalid. [Invalid 'com.apple.application-identifier' entitlement value.] For more information, visit the macOS Developer Portal.. * end error message******** Any thoughts or suggestions??? Thanks in advance.
Posted
by
Post marked as Apple Recommended
4.8k Views
Hi, My name is Sem and I am making an app for my school project. I have made an app where you can log in to an account, but now I want something extra: Sign in with Apple. If I go to the "Signing & Capabilities" tab in Xcode and add a capability, "Sign in with Apple" is not there. Now I have done some research but did not get any wiser. Can anyone help me how to fix this? PS: I am doing this for school so do not want a paid Apple Devolpers account, is it than still possible? Hopefully someone can help me! Sem
Posted
by
Post not yet marked as solved
5 Replies
8.2k Views
How to delete certificates from "Certificates, Identifiers & Profiles?" I have a new Mac and need to create new certificate for it but there is no option of deleting or editing of the existing certificates. When trying to add a new one the option is greyed out with the following commend: Developer ID Application This certificate is used to code sign your app for distribution outside of the Mac App Store. Maximum number of certificates generated.
Posted
by
Post not yet marked as solved
7 Replies
2.7k Views
I have some issues linking some frameworks when I run my iOS application. The issue comes as code signing version is not supported. I use Carthage for the dependency management. It links the framework then has the copy-framework script where it copies to the framework and does the code signing. For code signing it does the same thing codesign --force --sign ****** --preserve-metadata=identifier,entitlements path_to_framework The CodeDirectory for some frameworks after signing is 20200 and for others 20400. Obviously 20200 is not supported anymore hence the issue, although I don’t under why does it assign an old version number to it when it's been signed the same way in Big Sur. I have Xcode 12.3 and using Big Sur 11.4. Framework where it’s not working: Executable=********/Frameworks/FirebaseCore.framework/FirebaseCore Identifier=com.firebase.Firebase-FirebaseCore Format=bundle with generic CodeDirectory v=20200 size=226 flags=0x0(none) hashes=1+3 location=embedded Signature size=4886 Signed Time=18 Jun 2021 at 16:15:27 Info.plist entries=7 TeamIdentifier=******** Sealed Resources version=2 rules=10 files=1 Internal requirements count=1 size=196 Framework where the code signing works properly: Executable=********/Frameworks/RxSwift.framework/RxSwift Identifier=io.rx.RxSwift Format=bundle with Mach-O universal (arm64) CodeDirectory v=20400 size=74833 flags=0x0(none) hashes=2332+3 location=embedded Signature size=4886 Signed Time=18 Jun 2021 at 16:16:07 Info.plist entries=21 TeamIdentifier=******** Sealed Resources version=2 rules=10 files=0 Internal requirements count=1 size=176 Any idea what the issue can be?
Posted
by
Post not yet marked as solved
4 Replies
8.4k Views
I am trying to compile Xcode project on an online platform Bitrise. I am facing issue with sign in and provisioning .. after trying 4-5 days I am approaching you. Please solve this. ❌ error: No profiles for 'my app bundle id' were found: Xcode couldn't find any iOS App Development provisioning profiles matching 'my app bundle id'. Automatic signing is disabled and unable to generate a profile. To enable automatic signing, pass -allowProvisioningUpdates to xcodebuild. (in target 'myapp-Development' from project 'myapp') How to enable this "allowProvisioningUpdates" also why it is too difficult to do such processes with apple development.. I tried for android and it compiled successfully in a single attempt. please help.
Posted
by
Post not yet marked as solved
11 Replies
19k Views
In my certificate list, I see a certificate type called “iOS Distribution Managed”. What is the difference between this and “iOS Distribution”? It's kind of automatic. I don't remember creating it
Posted
by
Post marked as solved
8 Replies
11k Views
Hi, I have this error: Provisioning profile "iOS Team Provisioning Profile: com.Mcrich23.Pickt" doesn't include the com.apple.runningboard.assertions.webkit entitlement However, I can't add this entitlement because it pretty much does not exist. Any ideas?
Posted
by
Post not yet marked as solved
0 Replies
4.5k Views
General: DevForums tags: Code Signing, Signing Certificates, Provisioning Profiles, Entitlements Developer Account Help — This document is good in general but, in particular, the Reference section is chock-full of useful information, including the names and purposes of all certificate types issued by Apple Developer web site, tables of which capabilities are supported by which distribution models on iOS and macOS, and information on how to use managed capabilities. Developer > Support > Certificates covers some important policy issues Entitlements documentation TN3125 Inside Code Signing: Provisioning Profiles — This includes links to other technotes in the Inside Code Signing series. WWDC 2021 Session 10204 Distribute apps in Xcode with cloud signing Certificate Signing Requests Explained DevForums post --deep Considered Harmful DevForums post Don’t Run App Store Distribution-Signed Code DevForums post Resolving errSecInternalComponent errors during code signing DevForums post Finding a Capability’s Distribution Restrictions DevForums post Signing code with a hardware-based code-signing identity DevForums post Mac code signing: DevForums tag: Developer ID Creating distribution-signed code for macOS documentation Packaging Mac software for distribution documentation Placing Content in a Bundle documentation Embedding Nonstandard Code Structures in a Bundle documentation Embedding a Command-Line Tool in a Sandboxed App documentation Signing a Daemon with a Restricted Entitlement documentation Defining launch environment and library constraints documentation WWDC 2023 Session 10266 Protect your Mac app with environment constraints TN2206 macOS Code Signing In Depth archived technote — This doc has mostly been replaced by the other resources linked to here but it still contains a few unique tidbits and it’s a great historical reference. Manual Code Signing Example DevForums post The Care and Feeding of Developer ID DevForums post TestFlight, Provisioning Profiles, and the Mac App Store DevForums post For problems with notarisation, see Notarisation Resources. For problems with the trusted execution system, including Gatekeeper, see Trusted Execution Resources. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple let myEmail = "eskimo" + "1" + "@" + "apple.com"
Posted
by
Post marked as solved
7 Replies
4.2k Views
Xcode version : 14.0 Beta 3 macOS version : 13 Beta 3(22A5295i) Hi, I'm signing the DriverKit in Developer ID Application type profile with Developer ID Application (With Kext) type certificate on Xcode. But status shows error with"Xcode 14 and later requires a DriverKit development profile enabled for IOS and macOS.Visit the developer website to create or download a DriverKit profile" I have downloaded all profiles and Certificates to my Mac and installed all of them, then checked the website. I'm wondering what's different between "Development type" & "Developer ID Application type" profile ? and the reason why "2022-07-22 14:41:54.162815+0800 0x22ee2    Error       0x0                  138    0    kernelmanagerd: Error occurred while handling request "DextLaunch(arguments: Optional(["Driver Extension Server Name": com.asix.dext.usbdevice, "Check In Token": 371, "Driver Extension Server Tag": 4294975444, "CFBundleIdentifier": com.asix.dext.usbdevice, "DriverKit Reslide Shared Cache": 0, "kOSBundleDextUniqueIdentifier": <222f1e51 f5e890f7 b467c2a0 da761dbd 9b14dc5f 1bf56ff6 4eeab6b2 fed9683c>]))": Error Domain=NSPOSIXErrorDomain Code=8 "Exec format error" error code show on when I starting the app. I'll appreciate that someone can give me some idea or suggestions. Thanks a lot.
Posted
by
Post not yet marked as solved
1 Replies
1k Views
I enrolled in the Apple Developer Program. When I want to archive my project, I have an error message : "Automatic signing is unable to resolve an issue - Signing certificate is invalid. It may have been revoked or expired." How to have a valid signature certificate ?
Posted
by
Post not yet marked as solved
3 Replies
967 Views
I am trying to sign a Java application, packaged in a disk image, via jpackage, invoked via Ant (so no XCode anywhere). The packaging itself works fine, but I am having trouble figuring out the signing parameters. In particular, it seems I will have to provide a parameter --mac-signing-key-user-name What value should I give to this parameter? I have an Apple Developer Account (well, obviously...), I have generated a certificate and quite a few other things, but I am confused as to what the "signing-key-user-name" should be. The error message I currently get from jpackage is: No certificate found matching [...] using keychain [] I am on MAC OS 12.6 and JDK 17. Any help would be greatly appreciated.