Non-Apple Issued Code Signing Certificate: Can it Work with Mac OS 10.8 Gatekeeper?

前端 未结 3 620
迷失自我
迷失自我 2020-12-29 03:38

Our company develops our application for both OS X and Windows. We have an existing purchased code signing certificate from a non-Apple authority we use to ID our Windows i

3条回答
  •  陌清茗
    陌清茗 (楼主)
    2020-12-29 04:16

    No. The reason it will not work is: To pass through GateKeeper, you need a code signing certificate which is signed with your Apple Developer ID. This is not the same as a regular code signing certificate issued to your company. Only Apple issues Apple Developer IDs. (Or at least, at the time of this writing.)

    This is very confusing because:

    • The company we bought the code signing certificate from specifically claimed it works with MacOS. But what they meant was we could sign Apple code technically speaking. But passing GateKeeper is different. (Unclear marketing to say the least.)

    • At this time, there are unclear Apple docs which talk about signing code with 3rd party certificates. Ex: https://developer.apple.com/library/mac/documentation/security/conceptual/CodeSigningGuide/Procedures/Procedures.html
      However, while you can sign the code, it does not pass GateKeeper! Again, this may refer to either internal corporate application use, or it may just be out of date.

提交回复
热议问题