Running MAS builds locally no longer works, due to changes in Apple guidelines and electron-osx-sign documented here: https://github.com/electron-userland/electron-osx-sign/pull/105#issuecomment-260211431
Recently, the com.apple.developer.team-identifier entitlement was added to all new Mac provisioning profiles. This means that, going forward, distribution builds of Mac apps cannot be run directly; they are for submitting to iTunes Connect for app review only.
@develar's suggestion from another issue is to provide a mas-dev build target to fix this issue: https://github.com/electron-userland/electron-builder/issues/897#issuecomment-270881631
@sethlu Event if --type=development is specified, I got Feb 2 19:24:30 develar-home-imac com.apple.xpc.launchd[1] (org.develar.onshape.30616[26716]): Binary is improperly signed. and app doesn't start. Probably you can advise or I will dig :(
/usr/local/bin/node /Users/develar/Documents/electron-builder/packages/electron-builder/out/cli/build-cli.js --mac mas-dev
Rebuilding native production dependencies for darwin:x64
electron-builder Spawning npm rebuild nslog keytar +0ms
> [email protected] install /Users/develar/Documents/onshape-desktop-shell/node_modules/keytar
> node-gyp rebuild
CXX(target) Release/obj.target/keytar/src/main.o
CXX(target) Release/obj.target/keytar/src/keytar_mac.o
SOLINK_MODULE(target) Release/keytar.node
> [email protected] install /Users/develar/Documents/onshape-desktop-shell/node_modules/nslog
> node-gyp rebuild
CXX(target) Release/obj.target/nslog/src/main.o
CXX(target) Release/obj.target/nslog/src/nslog_mac.o
SOLINK_MODULE(target) Release/nslog.node
[email protected] /Users/develar/Documents/onshape-desktop-shell/node_modules/keytar
[email protected] /Users/develar/Documents/onshape-desktop-shell/node_modules/nslog
electron-builder npm (26751) exited with code 0 +4s
Packaging for mas x64 using electron 1.5.0 to dist/mas-dev
7-Zip (a) [64] 16.02 : Copyright (c) 1999-2016 Igor Pavlov : 2016-05-21
p7zip Version 16.02 (locale=utf8,Utf16=on,HugeFiles=on,64 bits,8 CPUs x64)
Scanning the drive for archives:
1 file, 42003134 bytes (41 MiB)
Extracting archive: /Users/develar/.electron/electron-v1.5.0-mas-x64.zip
electron-builder Spawning /Users/develar/Documents/electron-builder/node_modules/7zip-bin-mac/7za x -bd /Users/develar/.electron/electron-v1.5.0-mas-x64.zip -o/Users/develar/Documents/onshape-desktop-shell/dist/mas-dev +944ms
electron-builder /Users/develar/Documents/electron-builder/node_modules/7zip-bin-mac/7za (27062) exited with code 0 +1s
electron-builder Dev or extraneous dependencies: 7zip-bin-mac, 7zip-bin, ansi-align, ansi-styles, ansi-regex, @types/debug, @types/electron, @types/node, yauzl, yargs-parser, yargs, y18n, xtend, xmldom, xmlbuilder, wrappy, wrap-ansi, widest-line, which-module, verror, validate-npm-package-license, uuid-1345, util-deprecate, utf8-byte-length, url-parse-lax, update-notifier, typescript, unzip-response, typedarray, tweetnacl, tunnel-agent, truncate-utf8-bytes, trim-newlines, tough-cookie, through2, timed-out, throttleit, strip-json-comments, supports-color, strip-indent, strip-bom, sumchecker, stringstream, strip-ansi, through2/node_modules/readable-stream, through2/node_modules/isarray, string-width, string.prototype.codepointat, string_decoder, stat-mode, sshpk, sumchecker/node_modules/debug, speedometer, spdx-license-ids, spdx-expression-parse, spdx-correct, sntp, sshpk/node_modules/assert-plus, single-line-log, signal-exit, semver-diff, set-blocking, sanitize-filename, rimraf, require-main-filename, require-directory, request, registry-url, repeating, registry-auth-token, redent, readable-stream, read-pkg-up, read-all-stream, read-pkg, rc, qs, punycode, progress-stream, progress, request/node_modules/uuid, pretty-bytes, process-nextick-args, prepend-http, plist, pinkie-promise, pinkie, pify, rc/node_modules/minimist, pend, path-type, parse-json, path-is-absolute, path-exists, package-json, parse-color, os-locale, once, object-keys, oauth-sign, number-is-nan, nugget, node-status-codes, normalize-package-data, node-emoji, minimatch, mime-types, mime-db, meow, mime, nugget/node_modules/debug, nugget/node_modules/minimist, map-obj, macaddress, lowercase-keys, loud-rejection, load-json-file, meow/node_modules/minimist, lcid, lazy-req, latest-version, klaw, jsprim, json-stringify-safe, jsonpointer, json-schema, jsbn, jodid25519, isstream, isbinaryfile, isarray, is-utf8, is-typedarray, is-stream, is-retry-allowed, is-property, is-redirect, is-my-json-valid, is-npm, is-fullwidth-code-point, is-finite, is-ci, is-builtin-module, is-arrayish, ini, invert-kv, inherits, is-my-json-valid/node_modules/xtend, inflight, indent-string, http-signature, hosted-git-info, home-path, hoek, hawk, graceful-readlink, har-validator, has-ansi, got, glob, getpass, get-stdin, get-caller-file, generate-function, generate-object-property, fs.realpath, fs-extra, form-data, getpass/node_modules/assert-plus, forever-agent, find-up, fd-slicer, filled-array, extsprintf, extract-zip, extend, escape-string-regexp, es6-promise, error-ex, electron-macos-sign, extract-zip/node_modules/mkdirp, electron-download-tf, electron-download, electron-builder-util, electron-macos-sign/node_modules/debug, electron-builder-core, electron-builder, electron, electron-download-tf/node_modules/debug, electron-download-tf/node_modules/fs-extra, electron-download-tf/node_modules/minimist, electron-download-tf/node_modules/path-exists, electron-download/node_modules/debug, electron-download/node_modules/minimist, ecc-jsbn, electron-builder-util/node_modules/debug, duplexer2, delayed-stream, decamelize, deep-extend, dashdash, debug, currently-unhandled, cuint, cryptiles, create-error-class, core-util-is, concat-stream, concat-map, dashdash/node_modules/assert-plus, compare-version, commander, color-convert, code-point-at, combined-stream, cliui, cli-boxes, ci-info, chromium-pickle-js, chalk, caseless, capture-stack-trace, camelcase-keys, camelcase, builtin-modules, brace-expansion, boxen, boom, bcrypt-pbkdf, base64-js, balanced-match, camelcase-keys/node_modules/camelcase, aws4, aws-sign2, asynckit, assert-plus, asn1, boxen/node_modules/camelcase, asar-electron-builder, array-find-index +2ms
--
Path = /Users/develar/.electron/electron-v1.5.0-mas-x64.zip
Type = zip
Physical Size = 42003134
Everything is Ok
Folders: 125
Files: 84
Size: 107506195
Compressed: 42003134
electron-builder Executing security find-identity -v +2s
electron-builder Executing security find-identity -v -p codesigning +5ms
1) 2ABC71002FE96EBE6536C4AECC88013D6EB50443 "Developer ID Application: Vladimir Krivosheev (X8C9Z9L4HW)"
2) BB480AE0A98F3D778685112AB69FCF42027384FD "3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW)"
3) 32F67D8F957E740C692ADD8CD5A5E463992193DD "Vladimir Krivosheev"
3 valid identities found
1) 79790B8E22CB11C3C90A11FF69A525DB6898C718 "[email protected]"
2) 2ABC71002FE96EBE6536C4AECC88013D6EB50443 "Developer ID Application: Vladimir Krivosheev (X8C9Z9L4HW)"
3) BB480AE0A98F3D778685112AB69FCF42027384FD "3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW)"
4) C279CBDB45BA052533605406EEC8F6000EAEDF6F "com.apple.idms.appleid.prd.75497557506143626c64796a745669705939743571513d3d"
5) CA9992FB9D1ECD1B30690A1F0532F59E146C6894 "Vladimir Krivosheev"
6) 1C920063515E0671759D6EC3A16955C8AB6F929A "com.apple.idms.appleid.prd.75497557506143626c64796a745669705939743571513d3d"
7) 44DE023F1769CEF2068AA042F595EE95D381AC6C "Developer ID Installer: Vladimir Krivosheev (X8C9Z9L4HW)"
8) 31B92CCBD304EAD5527D919F8DFD1D5EB50AC78C "3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW)"
9) 4478824443B29B6FAF0F877047E44ABC78EA2730 "onshape-download.develar.org"
10) 5D7B920218E1A6554D61C4F4179103F3F8484F5E "[email protected] (For login authentication only)" (CSSMERR_TP_CERT_REVOKED)
11) 32F67D8F957E740C692ADD8CD5A5E463992193DD "Vladimir Krivosheev"
11 valid identities found
Signing app (identity: 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW))
electron-osx-sign `identity` passed in arguments. +1s
electron-osx-sign Executing... security find-identity -v +1ms
electron-osx-sign Identity:
> Name: 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) +858ms
electron-osx-sign Found 1 identity. +0ms
electron-osx-sign Pre-sign operation enabled for provisioning profile:
* Disable by setting `pre-embed-previsioning-profile` to `false`. +1ms
electron-osx-sign Pre-sign operation enabled for entitlements automation with versions >= `1.1.1`:
* Disable by setting `pre-auto-entitlements` to `false`. +0ms
electron-osx-sign No `provisioning-profile` passed in arguments, will find in current working directory and in user library... +0ms
electron-osx-sign No provisioning profile found, will not embed profile in app contents. +2ms
electron-osx-sign Automating entitlement app group...
> Info.plist: /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Info.plist
> Entitlements: /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.plist +0ms
electron-osx-sign `ElectronTeamID` not found in `Info.plist`, use parsed from signing identity: X8C9Z9L4HW +2ms
electron-osx-sign Entitlements file updated:
> Info.plist: /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Info.plist +3ms
electron-osx-sign `com.apple.application-identifier` not found in entitlements file, new inserted: X8C9Z9L4HW.org.develar.onshape +0ms
electron-osx-sign `com.apple.developer.team-identifier` not found in entitlements file, new inserted: X8C9Z9L4HW +0ms
electron-osx-sign `com.apple.security.application-groups` not found in entitlements file, new inserted: X8C9Z9L4HW.org.develar.onshape +0ms
electron-osx-sign Entitlements file updated:
> Entitlements: /var/folders/3f/qqlb61zj491dnhr434dhwb8m0000gn/T/electron-macos-sign-26750-org.develar.onshape.plist +0ms
electron-osx-sign Signing application...
> Application: /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app
> Platform: mas
> Entitlements: /var/folders/3f/qqlb61zj491dnhr434dhwb8m0000gn/T/electron-macos-sign-26750-org.develar.onshape.plist
> Child entitlements: /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist
> Additional binaries: undefined
> Identity: 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) +0ms
electron-osx-sign Walking... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents +1ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework +13ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib +1s
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libnode.dylib +559ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libnode.dylib +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework +669ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework +1ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app/Contents/MacOS/Onshape Helper EH +1s
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app/Contents/MacOS/Onshape Helper EH +1ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app +558ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app/Contents/MacOS/Onshape Helper NP +520ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app/Contents/MacOS/Onshape Helper NP +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app +536ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app/Contents/MacOS/Onshape Helper +526ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app/Contents/MacOS/Onshape Helper +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app +553ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/MacOS/Onshape +511ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/MacOS/Onshape +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +550ms
electron-osx-sign Executing... codesign --sign 3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW) --force --entitlements /var/folders/3f/qqlb61zj491dnhr434dhwb8m0000gn/T/electron-macos-sign-26750-org.develar.onshape.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +0ms
electron-osx-sign Verifying... +582ms
electron-osx-sign Verifying application bundle with codesign... +0ms
electron-osx-sign Executing... codesign --verify --deep --verbose=2 --strict /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +0ms
electron-osx-sign Verified. +393ms
electron-osx-sign Displaying entitlements... +0ms
electron-osx-sign Executing... codesign --display --entitlements :- /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +0ms
electron-osx-sign Entitlements:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.app-sandbox</key>
<true/>
<key>com.apple.application-identifier</key>
<string>X8C9Z9L4HW.org.develar.onshape</string>
<key>com.apple.developer.team-identifier</key>
<string>X8C9Z9L4HW</string>
<key>com.apple.security.application-groups</key>
<array>
<string>X8C9Z9L4HW.org.develar.onshape</string>
</array>
</dict>
</plist> +28ms
electron-osx-sign Application signed. +0ms
electron-builder Executing productbuild --component /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app /Applications --sign 3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW) /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape-0.5.7.pkg +9ms
productbuild: Adding component at /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app
productbuild: Signing product with identity "3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW)" from keychain /Users/develar/Library/Keychains/login.keychain-db
productbuild: Adding certificate "Apple Worldwide Developer Relations Certification Authority"
productbuild: Adding certificate "Apple Root CA"
productbuild: Wrote product to /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape-0.5.7.pkg
productbuild: Supported OS versions: [10.9.0, )
Process finished with exit code 0
type option is added for mas and mac
Target mac-dev is added for convenience (different out dir).
Will be published soon, but as stated above, it doesn't work yet.
@develar, when --type=development is specified, the individual's Mac Developer identity (one with a different team id) should be used for signing for running locally.
Ouch, thanks. Because electron-builder pass identity explicitly, electron-osx-sign doesn't select Mac Developer and trust passed options. Thanks for prompt response.
@sethlu Still the same error.
/usr/local/bin/node /Users/develar/Documents/electron-builder/packages/electron-builder/out/cli/build-cli.js --mac mas-dev
electron-builder Spawning npm rebuild nslog keytar +0ms
Rebuilding native production dependencies for darwin:x64
> [email protected] install /Users/develar/Documents/onshape-desktop-shell/node_modules/keytar
> node-gyp rebuild
CXX(target) Release/obj.target/keytar/src/main.o
CXX(target) Release/obj.target/keytar/src/keytar_mac.o
SOLINK_MODULE(target) Release/keytar.node
> [email protected] install /Users/develar/Documents/onshape-desktop-shell/node_modules/nslog
> node-gyp rebuild
CXX(target) Release/obj.target/nslog/src/main.o
CXX(target) Release/obj.target/nslog/src/nslog_mac.o
SOLINK_MODULE(target) Release/nslog.node
[email protected] /Users/develar/Documents/onshape-desktop-shell/node_modules/keytar
[email protected] /Users/develar/Documents/onshape-desktop-shell/node_modules/nslog
electron-builder npm (1772) exited with code 0 +4s
Packaging for mas x64 using electron 1.5.0 to dist/mas-dev
electron-builder Spawning /Users/develar/Documents/electron-builder/node_modules/7zip-bin-mac/7za x -bd /Users/develar/.electron/electron-v1.5.0-mas-x64.zip -o/Users/develar/Documents/onshape-desktop-shell/dist/mas-dev +1s
7-Zip (a) [64] 16.02 : Copyright (c) 1999-2016 Igor Pavlov : 2016-05-21
p7zip Version 16.02 (locale=utf8,Utf16=on,HugeFiles=on,64 bits,8 CPUs x64)
Scanning the drive for archives:
1 file, 42003134 bytes (41 MiB)
Extracting archive: /Users/develar/.electron/electron-v1.5.0-mas-x64.zip
--
Path = /Users/develar/.electron/electron-v1.5.0-mas-x64.zip
Type = zip
electron-builder Physical Size = 42003134
/Users/develar/Documents/electron-builder/node_modules/7zip-bin-mac/7za (2782) exited with code 0
Everything is Ok
Folders: 125
Files: 84
Size: 107506195
Compressed: 42003134
+1s
electron-builder Dev or extraneous dependencies: 7zip-bin, 7zip-bin-mac, ansi-align, ansi-regex, ansi-styles, @types/debug, @types/electron, @types/node, yauzl, y18n, yargs-parser, yargs, xtend, xmldom, xmlbuilder, wrappy, wrap-ansi, widest-line, which-module, verror, validate-npm-package-license, uuid-1345, util-deprecate, utf8-byte-length, url-parse-lax, update-notifier, unzip-response, typescript, typedarray, tweetnacl, truncate-utf8-bytes, tunnel-agent, tough-cookie, trim-newlines, timed-out, throttleit, through2, supports-color, strip-json-comments, sumchecker, strip-bom, strip-indent, stringstream, strip-ansi, through2/node_modules/readable-stream, through2/node_modules/isarray, string_decoder, string.prototype.codepointat, stat-mode, string-width, sshpk, sumchecker/node_modules/debug, speedometer, spdx-license-ids, spdx-correct, spdx-expression-parse, sntp, sshpk/node_modules/assert-plus, single-line-log, signal-exit, set-blocking, semver-diff, sanitize-filename, rimraf, require-main-filename, request, require-directory, repeating, registry-url, registry-auth-token, redent, readable-stream, read-pkg-up, read-pkg, read-all-stream, rc, qs, punycode, progress-stream, progress, request/node_modules/uuid, process-nextick-args, pretty-bytes, prepend-http, plist, pinkie-promise, pinkie, pify, rc/node_modules/minimist, path-type, path-is-absolute, pend, parse-json, parse-color, path-exists, package-json, once, os-locale, object-keys, oauth-sign, number-is-nan, nugget, normalize-package-data, node-status-codes, node-emoji, minimatch, mime-types, mime-db, nugget/node_modules/debug, mime, meow, nugget/node_modules/minimist, map-obj, macaddress, lowercase-keys, loud-rejection, load-json-file, lazy-req, lcid, meow/node_modules/minimist, latest-version, klaw, jsprim, jsonpointer, json-stringify-safe, json-schema, jsbn, jodid25519, isstream, isarray, isbinaryfile, is-utf8, is-typedarray, is-stream, is-retry-allowed, is-property, is-redirect, is-npm, is-my-json-valid, is-fullwidth-code-point, is-finite, is-ci, is-builtin-module, is-arrayish, ini, invert-kv, is-my-json-valid/node_modules/xtend, inherits, inflight, indent-string, http-signature, hosted-git-info, home-path, hoek, hawk, has-ansi, har-validator, graceful-readlink, got, glob, getpass, get-stdin, get-caller-file, generate-object-property, generate-function, fs.realpath, fs-extra, getpass/node_modules/assert-plus, form-data, forever-agent, find-up, filled-array, fd-slicer, extsprintf, extract-zip, extend, escape-string-regexp, es6-promise, error-ex, electron-macos-sign, extract-zip/node_modules/mkdirp, electron-download-tf, electron-download, electron-builder-util, electron-macos-sign/node_modules/debug, electron-builder-core, electron-builder, electron, electron-download-tf/node_modules/minimist, electron-download-tf/node_modules/debug, electron-download-tf/node_modules/fs-extra, electron-download/node_modules/debug, electron-download-tf/node_modules/path-exists, electron-download/node_modules/minimist, ecc-jsbn, electron-builder-util/node_modules/debug, duplexer2, delayed-stream, deep-extend, decamelize, debug, currently-unhandled, dashdash, cuint, cryptiles, create-error-class, core-util-is, concat-stream, concat-map, dashdash/node_modules/assert-plus, compare-version, commander, combined-stream, code-point-at, color-convert, cliui, cli-boxes, ci-info, chromium-pickle-js, chalk, caseless, capture-stack-trace, camelcase-keys, camelcase, builtin-modules, brace-expansion, boxen, boom, camelcase-keys/node_modules/camelcase, bcrypt-pbkdf, base64-js, balanced-match, aws4, boxen/node_modules/camelcase, aws-sign2, asynckit, assert-plus, asn1, asar-electron-builder, array-find-index +2ms
electron-builder Executing security find-identity -v +844ms
electron-builder Executing security find-identity -v -p codesigning +4ms
1) 2ABC71002FE96EBE6536C4AECC88013D6EB50443 "Developer ID Application: Vladimir Krivosheev (X8C9Z9L4HW)"
2) BB480AE0A98F3D778685112AB69FCF42027384FD "3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW)"
3) 32F67D8F957E740C692ADD8CD5A5E463992193DD "Vladimir Krivosheev"
4) 04F7D1EF92ECEFB8E252805A0E904E6FD5B6E337 "Mac Developer: Vladimir Krivosheev (744739DJ4Y)"
4 valid identities found
1) 79790B8E22CB11C3C90A11FF69A525DB6898C718 "[email protected]"
2) 2ABC71002FE96EBE6536C4AECC88013D6EB50443 "Developer ID Application: Vladimir Krivosheev (X8C9Z9L4HW)"
3) BB480AE0A98F3D778685112AB69FCF42027384FD "3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW)"
4) C279CBDB45BA052533605406EEC8F6000EAEDF6F "com.apple.idms.appleid.prd.75497557506143626c64796a745669705939743571513d3d"
5) CA9992FB9D1ECD1B30690A1F0532F59E146C6894 "Vladimir Krivosheev"
6) 1C920063515E0671759D6EC3A16955C8AB6F929A "com.apple.idms.appleid.prd.75497557506143626c64796a745669705939743571513d3d"
7) 44DE023F1769CEF2068AA042F595EE95D381AC6C "Developer ID Installer: Vladimir Krivosheev (X8C9Z9L4HW)"
8) 31B92CCBD304EAD5527D919F8DFD1D5EB50AC78C "3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW)"
9) 4478824443B29B6FAF0F877047E44ABC78EA2730 "onshape-download.develar.org"
10) 5D7B920218E1A6554D61C4F4179103F3F8484F5E "[email protected] (For login authentication only)" (CSSMERR_TP_CERT_REVOKED)
11) 32F67D8F957E740C692ADD8CD5A5E463992193DD "Vladimir Krivosheev"
12) 04F7D1EF92ECEFB8E252805A0E904E6FD5B6E337 "Mac Developer: Vladimir Krivosheev (744739DJ4Y)"
12 valid identities found
Signing app (identity: Mac Developer: Vladimir Krivosheev (744739DJ4Y))
electron-osx-sign `identity` passed in arguments. +884ms
electron-osx-sign Executing... security find-identity -v +1ms
electron-osx-sign Identity:
> Name: Mac Developer: Vladimir Krivosheev (744739DJ4Y) +712ms
electron-osx-sign Found 1 identity. +0ms
electron-osx-sign Pre-sign operation enabled for provisioning profile:
* Disable by setting `pre-embed-previsioning-profile` to `false`. +0ms
electron-osx-sign Pre-sign operation enabled for entitlements automation with versions >= `1.1.1`:
* Disable by setting `pre-auto-entitlements` to `false`. +0ms
electron-osx-sign No `provisioning-profile` passed in arguments, will find in current working directory and in user library... +1ms
electron-osx-sign No provisioning profile found, will not embed profile in app contents. +1ms
electron-osx-sign Automating entitlement app group...
> Info.plist: /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Info.plist
> Entitlements: /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.plist +0ms
electron-osx-sign `ElectronTeamID` not found in `Info.plist`, use parsed from signing identity: 744739DJ4Y +3ms
electron-osx-sign Entitlements file updated:
> Info.plist: /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Info.plist +2ms
electron-osx-sign `com.apple.application-identifier` not found in entitlements file, new inserted: 744739DJ4Y.org.develar.onshape +0ms
electron-osx-sign `com.apple.developer.team-identifier` not found in entitlements file, new inserted: 744739DJ4Y +0ms
electron-osx-sign `com.apple.security.application-groups` not found in entitlements file, new inserted: 744739DJ4Y.org.develar.onshape +1ms
electron-osx-sign Entitlements file updated:
> Entitlements: /var/folders/3f/qqlb61zj491dnhr434dhwb8m0000gn/T/electron-macos-sign-1599-org.develar.onshape.plist +0ms
electron-osx-sign Signing application...
> Application: /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app
> Platform: mas
> Entitlements: /var/folders/3f/qqlb61zj491dnhr434dhwb8m0000gn/T/electron-macos-sign-1599-org.develar.onshape.plist
> Child entitlements: /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist
> Additional binaries: undefined
> Identity: Mac Developer: Vladimir Krivosheev (744739DJ4Y) +0ms
electron-osx-sign Walking... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework +16ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib +1s
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libnode.dylib +698ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libnode.dylib +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework +780ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Electron Framework.framework +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app/Contents/MacOS/Onshape Helper EH +1s
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app/Contents/MacOS/Onshape Helper EH +8ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app +562ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper EH.app +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app/Contents/MacOS/Onshape Helper NP +570ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app/Contents/MacOS/Onshape Helper NP +1ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app +585ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper NP.app +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app/Contents/MacOS/Onshape Helper +590ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app/Contents/MacOS/Onshape Helper +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app +577ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/Frameworks/Onshape Helper.app +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/MacOS/Onshape +587ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /Users/develar/Documents/electron-builder/node_modules/electron-macos-sign/default.entitlements.mas.inherit.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app/Contents/MacOS/Onshape +0ms
electron-osx-sign Signing... /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +609ms
electron-osx-sign Executing... codesign --sign Mac Developer: Vladimir Krivosheev (744739DJ4Y) --force --entitlements /var/folders/3f/qqlb61zj491dnhr434dhwb8m0000gn/T/electron-macos-sign-1599-org.develar.onshape.plist /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +1ms
electron-osx-sign Verifying... +588ms
electron-osx-sign Verifying application bundle with codesign... +0ms
electron-osx-sign Executing... codesign --verify --deep --verbose=2 --strict /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +0ms
electron-osx-sign Verified. +371ms
electron-osx-sign Displaying entitlements... +0ms
electron-osx-sign Executing... codesign --display --entitlements :- /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app +0ms
electron-osx-sign Entitlements:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.app-sandbox</key>
<true/>
<key>com.apple.application-identifier</key>
<string>744739DJ4Y.org.develar.onshape</string>
<key>com.apple.developer.team-identifier</key>
<string>744739DJ4Y</string>
<key>com.apple.security.application-groups</key>
<array>
<string>744739DJ4Y.org.develar.onshape</string>
</array>
</dict>
</plist> +26ms
electron-osx-sign Application signed. +1ms
electron-builder Executing productbuild --component /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app /Applications --sign 3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW) /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape-0.5.7.pkg +5ms
productbuild: Adding component at /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape.app
productbuild: Signing product with identity "3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW)" from keychain /Users/develar/Library/Keychains/login.keychain-db
productbuild: Adding certificate "Apple Worldwide Developer Relations Certification Authority"
productbuild: Adding certificate "Apple Root CA"
productbuild: Wrote product to /Users/develar/Documents/onshape-desktop-shell/dist/mas-dev/Onshape-0.5.7.pkg
productbuild: Supported OS versions: [10.9.0, )
Process finished with exit code 0
@develar sorry, one thing I forgot. 😢 When the sandbox is enabled in entitlements file: With the individual Mac Developer certificate, the development provisioning profile should be used with signing; same with the 3rd Party Mac Developer Application certificate, the distribution provisioning profile should be used with signing.
More: https://mintkit.net/electron-userland/electron-osx-sign/guide/
@sethlu Why it is not automatically configured if type set to development? Thanks, I will investigate.
@develar the provisioning profile is generated from the apple developer website. With the current version of electron-osx-sign, if the profile is placed under the (current) working directory, it will be automatically embedded by electron-osx-sign in the app contents folder.
Amend: As the provisioning profiles for development and for distribution are slightly different in terms of their formats, electron-osx-sign will select the appropriate profile for embedding depending on the --type being development or distribution.
I was able to build a mas target that runs locally by setting "type": "development" in electron-builder's config, and placing my App_Development.provisionprofile in the project directory. :tada:
However, I also had to remove all but one "Mac Developer" key from my keychain, or else electron-builder would attempt to use the wrong identity, and setting CSC_NAME did not work.
I also had to remove all but one "Mac Developer" key from my keychain, or else electron-builder would attempt to use the wrong identity
Please provide details (Please set env DEBUG=electron-builder and attach log of the terminal output).
With two Mac Developer keys, it selects the wrong one.
With CSC_NAME, it selects the right one but fails with
Error: Cannot find valid "3rd Party Mac Developer Installer" identity to sign MAS installer
With only the correct Mac Developer key, it selects that one and signs successfully.
I guess you need to special-case the mas-dev target here
Also note that the .app was signed and works, it just didn't output the .pkg.
At first it didn't work for me. It did when I added the dev provisioning profile into the same folder.
To create a dev profile I had to create a dev certificate and specify the UUID of the machines I want to run the app on.
@liliakai I don't known which cert should be used to sign pkg for development, you cannot sign using Mac Developer:.
For now pkg will be skipped for mas-dev. Tutorial or other required changes to simplify process — help wanted.