apache / apache/cordova-electron
Invalid signing for Cordova-electron-Mac build
- Dominant language
- JavaScript
- Stars
- 135
- Forks
- 60
- Avg merge
- 1d 6h
- Merged PRs (30d)
- 5
Description
The Mac OSX electron release build doesn't get signed properly.
Didn't find any possible solution from stack-overflow or your Slack groups.
The .pkg builds fine but when verifying from Apple - App Store Connect, i get this
`ERROR ITMS-90237: "The product archive package's signature is invalid. Ensure that it is signed with your "3rd Party Mac Developer Installer" certificate.`
My build file is
```
"electron": {
"mac": {
"package": [
"pkg"
],
"signing": {
"release": {
"identity": "Company Limited (ABCD123456)",
"entitlements": "Entitlements-Release.plist",
"entitlementsInherit": "Entitlements-Release-Inherit.plist",
"provisioningProfile": "MacAppStoreDistribution.provisionprofile"
}
```
and i created entitlements files with these
```
com.apple.security.app-sandbox
and
com.apple.security.app-sandbox
com.apple.security.inherit
```
I'm using
`9.0.0 (cordova-lib@9.0.1)`
`"cordova-electron": "^1.1.1"`
`Mac OS Catalina 10.15.7`
- [x] I searched for existing GitHub issues
- [x] I updated all Cordova tooling to most recent version (tried this to test in the new version but it made no difference)
- [x] I included all the necessary information above (i can add more, whatever is required)
Contributor guide
Research direction
Start with the Electron mac signing configuration, Entitlements-Release.plist, Entitlements-Release-Inherit.plist, and the MacAppStoreDistribution.provisionprofile shown in the report. Reproduce the package verification on macOS Catalina and compare the signing identity with Apple’s reported requirement. Done means the generated .pkg passes App Store Connect validation without ITMS-90237.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- electron, javascript, nodejs
- Domain
- build-system, release, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100