Skip to content

Support for "Apple Development" and "Apple Distribution" certificates#5238

Draft
yannickpulver wants to merge 4 commits intoJetBrains:masterfrom
yannickpulver:master
Draft

Support for "Apple Development" and "Apple Distribution" certificates#5238
yannickpulver wants to merge 4 commits intoJetBrains:masterfrom
yannickpulver:master

Conversation

@yannickpulver
Copy link
Copy Markdown

Describe proposed changes and the issue being fixed

Fixes CMP-4272 createDistributable signing failing on macOs with Could not find certificate

Testing

Describe how you tested your changes. If possible and needed:

  • Test it on a sample project
  • Write unit tests
  • Provide a code snippet

This should be tested by QA

Release Notes

Fixes - Desktop

  • Adds support for Apple Development and Apple Distribution certificates

@yannickpulver yannickpulver changed the title Updates fullDeveloperID Support for "Apple Development" and "Apple Distribution" certificates Feb 16, 2025
@kropp
Copy link
Copy Markdown
Member

kropp commented Mar 27, 2026

Hi @yannickpulver,
do you plan to continue working on this PR?

@yannickpulver
Copy link
Copy Markdown
Author

Hi @kropp I tried last year but failed to validate it. I could try to give it another go, but if there's somebody internally working on that I'm happy to close it.

yannickpulver and others added 3 commits March 27, 2026 13:59
…nd Mac Development certificates for macOS signing

jpackage only recognizes "Developer ID Application" and "3rd Party Mac Developer Application"
certificate prefixes — it prepends these to the identity, breaking newer Apple certificate types.
Skip jpackage signing for unsupported cert types and let the existing MacSigner handle it.
Also fixes passing raw identity instead of fullDeveloperID to jpackage.

Fixes CMP-4272, relates to CMP-7651
jpackage only signs PKGs with "Developer ID Installer" and "3rd Party Mac
Developer Installer" prefixes. For newer certificate types (Apple Distribution,
Mac App Distribution), sign the PKG post-creation using productsign.

Tries both "3rd Party Mac Developer Installer" and "Mac Installer Distribution"
as candidates since Apple still issues certs with the legacy name despite
documenting the new one.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants