Electron-osx-sign: nested code is modified or invalid

[thPatrick]

I'm trying to sign my app for release outside of the app store and the signing always fails to verify.

My npm script runs electron-packager --osxSign.identity='Developer: Developer Name (<ID>)' which I understand uses electron-osx-sign to sign the app. Verifying the signing fails with nested code is modified or invalid.

I've attached the debugger output which includes my npm script.

Not sure if I'm missing any steps.

devproblems.txt

[sethlu]

Hi @thPatrick! Sorry for the late reply. I'm not very sure what exactly caused the issue... Are you using the latest Xcode with the command line tools installed for your macOS?

If not, I think this issue could be related to https://github.com/electron-userland/electron-builder/issues/559#issuecomment-230495674 😕 and updating Xcode and its components seems to resolve it.

[twvm]

I am running into the same issue. Verifying the code signature fails with the same nested code is modified or invalid error when signing with a Developer ID Application cert. I have all the latest version installed.

[sethlu]

Hi @twvm would you mind posting the codesigning command and the debug log (with export DEBUG=electron-osx-sign*) so we can diagnose where the issue is from?

[twvm]

After hours of hair pulling, I finally found the root cause. I was manually setting the codesigning option in KeyChainAccess to Always Trust for my DeveloperID Application certificate. Removing this option and have it use the system defaults was all that was required.

[thPatrick]

Thanks for the replies everyone. Apologies for my lateness; I've been off work for a few weeks. @sethlu I believe I am using the latest version of Xcode, version 8.3.2.

I'm going to try what @twvm suggested shortly and post back.

[thPatrick]

@twvm That resolved it for me! So glad to have this working. Thanks for making such an awesome package!

[sandeep-thak]

Thanks @twvm that helped me as well.