Codesign error on Mac, what am I missing?

[Mors]

I registered for an apple developer account & followed this guide to code sign & notarise - https://www.kvraudio.com/forum/viewtopic.php?t=531663

However on the first piece of code for the code signing - codesign -s "Developer ID Application: Team Name (Team ID)" "/path/plugin.component" --timestamp

I get the error - The specified item could not be found in the keychain.

Feel like I'm missing a very obvious step here?

[Lindon]

@Mors said in Codesign error on Mac, what am I missing?:

"/path/plugin.component"

have you created the required certificate at the apple developer site?
have you downloaded it and put it in your key chain?

[d.healey]

@Mors You need to add your certificate to the system keychain. If I remember correctly you can do this through xcode.

[Mors]

@Lindon I have not! How do I go about doing this?

[d.healey]

@Mors https://developer.apple.com/documentation/xcode/sharing-your-teams-signing-certificates

[Mors]

@d-healey which certificate is it? Apple development, Apple distribution, Mac installer distribution, developer ID application or developer ID installer?

I’m just going to be doing this for the .component files no installers or packages

[d.healey]

@Mors I only have Application and Installer certificates

[Mors]

@d-healey I managed to get it code signed and notarised but was unable to staple, it said you can't staple .zip files or something like that? Now when you download the file it still gives the suspicious download warning but doesn't give any warning when opening the plug in, something I can do there?

[HISEnberg]

@Mors Do you mind sharing your code signing notarizing process? I have been struggling to get this done.

[Mors]

@HISEnberg I just copied this - https://www.kvraudio.com/forum/viewtopic.php?t=531663

took a little trial and error with inputting the destination, but starting from /Users tended to work

[HISEnberg]

@Mors Thanks, I am just struggling to get the Developer ID certificate imported to Keychain Access. I take it you are the Account Holder and the process was as simple as creating it online and downloading it?

[Mors]

@HISEnberg I followed this guide - https://developer.apple.com/documentation/xcode/sharing-your-teams-signing-certificates

created it and then exported it

[HISEnberg]

@Mors Ah brilliant thank you I was struggling to find documentation on this!

[d.healey]

@HISEnberg said in Codesign error on Mac, what am I missing?:

@Mors Ah brilliant thank you I was struggling to find documentation on this!

lol he just reposted the links I'd already posted in this thread :cat_face_with_tears_of_joy:

@Mors said in Codesign error on Mac, what am I missing?:

it said you can't staple .zip

Yeah I've only had success with installers (pkg)

[Lindon]

@Mors said in Codesign error on Mac, what am I missing?:

@d-healey I managed to get it code signed and notarised but was unable to staple, it said you can't staple .zip files or something like that? Now when you download the file it still gives the suspicious download warning but doesn't give any warning when opening the plug in, something I can do there?

you dont staple the zip, you staple the plugin, so:

1.compile plugin
2. code sign it
3. zip it up
4. Notarize the zip
5. if successful staple the output from step 2.
6. zip up the output from step 5.
7. ship the output from step 6

[HISEnberg]

@d-healey Thanks, I was a bit flustered at the time I wrote that so I missed your earlier posts. Got past the certificates eventually but still working out the notarization process for my package. Do you typically use terminal for this process or Xcode?

[d.healey]

@HISEnberg Terminal, I run a script that does all the work

Here's a video I made about it. The only really difference now is we have to use the notary tool instead of altool (because Apple).

[HISEnberg]

@d-healey said in Codesign error on Mac, what am I missing?:

Yes your video helped me out a lot previously setting up my package installer, really appreciate you sharing that.

I still don't know why but I was having one hell of a time trying to set up my certificates and getting it notarized, terminal kept failing me (not acknowledging my ID's specifically). In the end these two videos and their extended links did the trick for me:

Certificates:
https://www.youtube.com/watch?v=m097IHT7v0Q

Notarization:
https://www.youtube.com/watch?v=GpdN97OX1Z8

@Mors the notarization video may help you in stapling if you still haven't solved it.