Electron-builder: Cannot find valid code signing certificate despite valid identities being printed in console during build

[nparsons08]

• Version: 19.54.0

• Electron Builder: 2.19.1

• Target:
  mac, windows, linux (--mwl)

I run the command build --em.main=build/electron.js -mwl --x64 e -p always and it goes through the proper steps and then it says "skipped macOS application code signing reason=cannot find valid "Developer ID Application" identity or custom non-Apple code signing certificate, see https://electron.build/code-signing allIdentities=" and prints:

1) 2B12438F977D8D2F0E1CEDEBC76A7422FD04587E "3rd Party Mac Developer Application: Foo.io Inc (EHV7XZLAHA)"
 2) FAC6726A0A4AFC4C06D46A46834279BB3EB25844 "3rd Party Mac Developer Installer: Foo.io Inc (EHV7XZLAHA)"
           2 identities found

Valid identities only
1) 2B12438F977D8D2F0E1CEDEBC76A7422FD04587E "3rd Party Mac Developer Application: Foo.io Inc (EHV7XZLAHA)"
2) FAC6726A0A4AFC4C06D46A46834279BB3EB25844 "3rd Party Mac Developer Installer: Foo.io Inc (EHV7XZLAHA)"

I'm at a loss... Cannot figure out how to sign my application with electron-builder.

[TuckerDowns]

You need an ID of type "Developer ID Application" create one via Apple Developer program

[nparsons08]

Already have that. And it’s in my keychain.

On Tue, Feb 6, 2018 at 6:22 PM TuckerD [e-mail] wrote:

You need an ID of type "Developer ID Application" create one via Apple
Developer program

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/electron-userland/electron-builder/issues/2513#issuecomment-363623446,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ABRFBB1gjWls91UozDyVyaLZrcQ7LJERks5tSPq_gaJpZM4Rp7Q8
.

[TuckerDowns]

The "3rd Party Mac Developer Application" =/= "Developer ID Application"

I just found out that you should be able to generate one of the correct type of profiles from XCode but you need to be the team agent in your Apple Developer program (if you are enterprise)

Try XCode > Preferences > Accounts > ... > Manage Certificates > + > Developer ID Application

[TuckerDowns]

Or, at least that's where I've ended up after working on this issue for all 8 hours of my day. Going to try to get our team agent to generate one of those certificates tomorrow.

[nshoes]

@TuckerDowns did you ever resolve your issue? I'm having the same one. Added every cert available and the .pkg is still not signed (checking with codesign).

[adammoisa]

Same here, I have it in my keychain but it's not picking it up. Anyone make progress?

[BeatriceThalo]

Our team uses one build server (OS X 10.13.6 not 10.12) and after getting a certificate that was not prefixed "iPhone Developer:" but rather "Developer ID Application:" with either no identity property in electron-builder.json or setting the identity property to the certificate suffix/part after the colon, we got an <App Name> Helper EH errSecInternalComponent error until we gave ssh access to the keychain.

[aguynamedben]

This is happening to me after getting a new laptop. I have the same certificates installed identically on both laptops, but electron-builder isn't finding the certificate on the new laptop even though it's identically installed.

Are there any ways to debug this? It's keeping me from releasing new version of my app on the new laptop. I'm using electron-builder 20.28.4.

[zhaoterryy]

Is security find-identity -vp codesigning able to find your certs?

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[Randyshu2018]

Try XCode > Preferences > Accounts > ... > Manage Certificates > + > Developer ID Application

how to find the created certificate?

[johannesjo]

@Randyshu2018 Keychain Access (another application).

I can't figure this out. Got all the certificates in place, they are listed by electron builder but somehow it doesn't see them as the right ones...

[lemmycaution]

Hi there,
This is still happening, is there any explanation why issue closed, is there any viable solution? or direct any clue as a workaround?

Bests,

[AndrewKeplinger]

I'm seeing same issue, I think. I can see the certificates in keychains, with private key, but "security find-identity" doesn't show them. code sign won't let me use them for signing. Stuck. If I take the "-p codesigning" off the end of the security command the missing certs show up. I just can't use them.

[lemmycaution]

@zhaoterryy no it's not listing in my case. I have a Developer ID Application: xxx.... visible in keychain but not in command line. Any tips more than welcome, thanks.

[4dams]

Any updates on this? :(

[DaveLomber]

This Apple stuff is a total crap...

It does not work neither with 'Apple Distribution' nor with 'Developer ID Application'

What is '3rd Party Mac Developer Application'? is there any guide how to generate this one?

[samuelmeuli]

@DaveLomber A "3rd Party Mac Developer Application" certificate seems to be the same as a "Mac App Distribution" certificate.

In Xcode 11, the "Apple Development" and "Apple Distribution" certificates have replaced the corresponding iOS/macOS certificates. electron-builder still requires a "Mac App Distribution" certificate, though. You can create one in your Apple Developer Account. Click +, Mac App Distribution, Continue and follow the remaining steps. Download your certificate and open it. This will add it to your Keychain, where electron-builder can find it.

[camlin]

Be aware that another reason for this to fail is if you try to do it via remote SSH or via a CI server. The fact there is no GUI means the keychain remains locked, meaning there is no access to the key.

The clue to this will that it reports a errSecInternalComponent error. And the command to run (in the SSH) before you trigger your build is: security unlock-keychain -p {account-password} login.keychain

See also https://github.com/electron-userland/electron-builder/issues/4455#

[continuata]

I had the same issue, turns out that Mac updates have installed XCode 11 and the signing script is now looking for different certificates.

You need to log in here and download certificates for:
Apple Development
Apple Distribution
https://developer.apple.com/account/resources/certificates/list

The old Developer ID XXX ones don't seem to work anymore.

After installing the above certs ... running security find-identity -vp codesigning shows the certs are found