We sign the installer Developer ID certificate

If you distribute your applications yourself, outside of MacAppStore, as an installer, then you should know that Xcode does not allow you to sign the Developer ID installer with a certificate. This is odd when you consider how many Xcode updates have already been released after the introduction of the Developer ID.

The documentation says so:

If you want to use the packagemaker (1) command. Code by the installer certificate by using the productsign command.

The need to manually sign the installer is a bit annoying, especially if you need to do this often. Therefore, I wrote a small service that allows you to get by with just a few mouse clicks.

So, you first need to export the desired application as an installer:


')
In the next step, select any certificate to sign (there is no Developer ID certificate in this list) and save the installer to a convenient place.

While it is signed with the wrong certificate, but now we will fix it.



Sign the installer. In the context menu, select Services → Product Sign .



If you have several suitable Developer ID certificates, you can choose the one you need.

The signed installer is saved next to the original one, with _s added to the name. You can sign several installers at the same time by selecting several files or even an entire folder.

Result:



The service itself with its installation script can be picked up on github . The service is distributed under the license WTFPL .

Good luck!