Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Mac Developer certificate for development sign #183

Closed
wants to merge 1 commit into from

Conversation

sethlu
Copy link
Contributor

@sethlu sethlu commented Dec 17, 2018

Instead of using Developer ID Application certificates to code sign development versions of app for distribution outside the Mac App Store, we use Mac Developer certificates. The updated matrix is the following:

  • Distribution, in the Mac App Store: 3rd Party Mac Developer Application
  • Distribution, outside the Mac App Store: Developer ID Application
  • Development, in the Mac App Store: Mac Developer
  • Development, outside the Mac App Store: Mac Developer (changed)

@sethlu sethlu self-assigned this Dec 17, 2018
@sethlu sethlu added the bug label Dec 17, 2018
debuglog('Finding `Developer ID Application` certificate for distribution outside the Mac App Store...')
promise = findIdentitiesAsync(opts, 'Developer ID Application:')
debuglog('Finding `Mac Developer` certificate to sign app for development...')
promise = findIdentitiesAsync(opts, 'Mac Developer:')
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think I have a "Mac Developer" cert, if this is a new thing we probably need to fall back to the old thing

Copy link
Contributor Author

@sethlu sethlu Dec 17, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mac Developer cert is the local certificate for each machine and has been the one we use for signing the mas dev versions. This would make it a little easier by default for folks without the Developer ID Application certs on their local machine.

Also I think this could help distinguish code signing for distribution more as app notarization only works with Developer ID Application signed apps.

I'm imagining that this shouldn't pose issues for existing toolchains people set up to distribute their apps since this only affects the dev side 🤔

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In 2020 we have two more certs #227 So I think it is time to change the defaults 😉

@sethlu sethlu force-pushed the use-development-certificate branch from 1249f7d to a4049b2 Compare April 16, 2019 17:38
@sethlu
Copy link
Contributor Author

sethlu commented Apr 16, 2019

Note: Accidentally committed on the wrong branch.

@mahnunchik
Copy link

Any chance to have it merged?

@MarshallOfSound
Copy link
Member

Conflicting with the rewrite, if this change is still applicable please raise a new pull request. Apologies for the conflicts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants