OS X productsign error: Could not find appropriate signing identity

macos pkg-file
Ravi picture Ravi · Jan 20, 2014 · Viewed 13.4k times · Source

I'm trying to sign an OS X installer package using the command line utility productsign, but get an error.

productsign --sign "Developer ID Installer: XYZ" input.pkg output.pkg
productsign: error: Could not find appropriate signing identity for “Developer ID Installer: XYZ”.

When I open Keychain Access, I'm able to see the cert that I created at developer.apple.com and imported into my login Keychain. Its Common Name matches my command line parameter: "Developer ID Installer: XYZ". Is there any way to debug this particular error?

Answer

Emmanuel Buu picture Emmanuel Buu · Jul 14, 2016

I had the same issue. My installer certificate had no private key. You can check this by opening keychain and look for your certificat named like:

Developer ID Installer: My Company (1258345791ZL)

If you there is a private key attached, you should see

Developer ID Installer: My Company (1258345791ZL) (!) Private Key

If you cannot unfold the private key under your certificate, it means that it is missing.

Then to fix this, you have to log on to developer.apple.com with your apple ID and

1- try remove and download your certificate again

2- if this is not enough create a new with with the following steps

2a - click on the (+) or go here:

https://developer.apple.com/account/mac/certificate/distribution/create

2b - specify Production / Developer ID, then press Continue

2c - specify "Developer ID Installer"

2d - follow, the instruction to create a certificate request using keychain

2e - upload your certificate request file in apple developper

2f - download the newly created certificate in your keychain.

2g - cleanup all other installer certificate to be sure.

Et voila, you can sign.

Related questions

How to unpack and pack pkg file?

I have a pkg file created by Install Maker for Mac. I want to replace one file in pkg. But I must do this under Linux system, because this is a part of download process. When user starts to download …

Read More
Uninstall packages in Mac OS X

How can you completely uninstall (remove files that belong to a certain package) in Mac OS X? Can this be done using a command in the terminal? I have installed a .pkg package on my Mac and I am wondering …

Read More
How to generate an installer package for Mac app?

How can I create a single installer package for an OS X binary as well as a few configuration and script files? Final folders should look like this: Any help would be appreciated. Thanks.

Read More