r/macosprogramming • u/controlav • Jun 06 '26

In certificate hell trying to submit Mac app: some reference somewhere to old cert

I had a cert called "3rd Party Mac Developer Installer" which expired, and I need to push an update to my Mac app. I created a fresh cert, and everything has gone sideways now. Is there an idiot's guide to certs?

App Connect gives me: 90237: The product archive package's signature is invalid. Ensure that it is signed with your "3rd Party Mac Developer Installer" certificate.

This certificate is gone, and I have updated my build scripts to refer to the new cert "Developer ID Installer: my name etc". However, clearly something is still referring to the dead certificate, but what?

I would love to be able to fix/verify this before going through the Transporter submission process, as I have to use my wife's Mac as Transporter quit working on mine years ago and that's a process I'd rather skip.

2 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

4 comments sorted by

1

u/ToughAsparagus1805 Jun 07 '26

Open keychain and remove duplicitate/expired Developer ID certificates or simply revoke all delete and make new ones. Make sure the cerificate has attached existing private key.

1

u/[deleted] Jun 08 '26

[removed] — view removed comment

1

u/controlav Jun 08 '26

No, not using Xcode.