apache / apache/cordova-electron

Invalid signing for Cordova-electron-Mac build

Open
#176 5 comments 1 reaction 0 assignees View on GitHub
Dominant language
JavaScript
Stars
135
Forks
60
Avg merge
1d 6h
Merged PRs (30d)
5

Description

The Mac OSX electron release build doesn't get signed properly.
Didn't find any possible solution from stack-overflow or your Slack groups.
The .pkg builds fine but when verifying from Apple - App Store Connect, i get this

`ERROR ITMS-90237: "The product archive package's signature is invalid. Ensure that it is signed with your "3rd Party Mac Developer Installer" certificate.`

My build file is
```

"electron": {
"mac": {
"package": [
"pkg"
],
"signing": {
"release": {
"identity": "Company Limited (ABCD123456)",
"entitlements": "Entitlements-Release.plist",
"entitlementsInherit": "Entitlements-Release-Inherit.plist",
"provisioningProfile": "MacAppStoreDistribution.provisionprofile"
}

```
and i created entitlements files with these
```
com.apple.security.app-sandbox

and
com.apple.security.app-sandbox

com.apple.security.inherit

```
I'm using

`9.0.0 (cordova-lib@9.0.1)`
`"cordova-electron": "^1.1.1"`
`Mac OS Catalina 10.15.7`

- [x] I searched for existing GitHub issues
- [x] I updated all Cordova tooling to most recent version (tried this to test in the new version but it made no difference)
- [x] I included all the necessary information above (i can add more, whatever is required)

Contributor guide

Open the contributing guide

Research direction

Start with the Electron mac signing configuration, Entitlements-Release.plist, Entitlements-Release-Inherit.plist, and the MacAppStoreDistribution.provisionprofile shown in the report. Reproduce the package verification on macOS Catalina and compare the signing identity with Apple’s reported requirement. Done means the generated .pkg passes App Store Connect validation without ITMS-90237.

Written by the indexing model from the issue text.

Assessment

Tech stack
electron, javascript, nodejs
Domain
build-system, release, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.