Bug 38779 - error in signing app, and icloud entitlement for production/app store
Summary: error in signing app, and icloud entitlement for production/app store
Alias: None
Product: Xamarin.Mac
Classification: Desktop
Component: Other ()
Version: 2.4.1 (C6SR1)
Hardware: Macintosh Mac OS
: --- normal
Target Milestone: ---
Assignee: Chris Hamons
Depends on:
Reported: 2016-02-16 01:02 UTC by renan jegouzo
Modified: 2016-03-03 18:57 UTC (History)
2 users (show)

Is this bug a regression?: ---
Last known good build:

Notice (2018-05-24): bugzilla.xamarin.com is now in read-only mode.

Please join us on Visual Studio Developer Community and in the Xamarin and Mono organizations on GitHub to continue tracking issues. Bugzilla will remain available for reference in read-only mode. We will continue to work on open Bugzilla bugs, copy them to the new locations as needed for follow-up, and add the new items under Related Links.

Our sincere thanks to everyone who has contributed on this bug tracker over the years. Thanks also for your understanding as we make these adjustments and improvements for the future.

Please create a new report on Developer Community or GitHub with your current version information, steps to reproduce, and relevant error messages or log files if you are hitting an issue that looks similar to this resolved bug and you do not yet see a matching new report.

Related Links:

Description renan jegouzo 2016-02-16 01:02:22 UTC
[2016-02-16 01:49:40 CET] <main> ERROR: ERROR ITMS-90237: "The product archive package's signature is invalid. Ensure that it is signed with your "3rd Party Mac Developer Installer" certificate."
[2016-02-16 01:49:40 CET] <main> ERROR: ERROR ITMS-90046: "Invalid Code Signing Entitlements. Your application bundle's signature contains code signing entitlements that are not supported on Mac OS X. Specifically, value '' for key 'com.apple.developer.icloud-container-environment' in 'net.aestesis.waves.pkg/Payload/Waves.app/Contents/MacOS/Waves' is not supported. This value should be a string value of 'Production'"
[2016-02-16 01:49:40 CET] <main> DBG-X: The error code is: 1102
[2016-02-16 01:49:40 CET] <main>  INFO: Done performing authentication.
[2016-02-16 01:49:40 CET] <main> DBG-X: Returning 1

the entitlements key, com.apple.developer.icloud-container-environment=Production must be used only in distribution, not in developpement/tests mode and I don't see a way for conditionally include different entitlements.plist file by configuration.

also, it seems like the .pkg isn't signed with the right signature. (there is one for the .app and a different one for the .pkg normally)

Xamarin Studio
Version 6.0 (build 3668)
Installation UUID: 2a46676f-5eb8-4569-9aa7-630cd15bdfc2
	Mono 4.3.0 (mono-4.3.1-branch/37d269c) (64-bit)
	GTK+ 2.24.23 (Raleigh theme)

	Package version: 403002114

Version: 0.30.0
Location: /Applications/Xamarin Profiler.app/Contents/MacOS/Xamarin Profiler

Apple Developer Tools
Xcode 7.2.1 (9548.1)
Build 7C1002

Version: (Business Edition)
Hash: 962a050
Branch: master
Build date: 2016-01-29 16:59:11-0500

Version: (Business Edition)
Android SDK: /Volumes/ssd/android-sdk-macosx
	Supported Android versions:
		4.2 (API level 17)
		5.1 (API level 22)
		6.0 (API level 23)

SDK Tools Version: 24.4.1
SDK Platform Tools Version: 23.0.1
SDK Build Tools Version: 23.0.2

Java SDK: /usr
java version "1.8.0_25"
Java(TM) SE Runtime Environment (build 1.8.0_25-b17)
Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)

Xamarin Android Player
Not Installed

Version: (Business Edition)

Build Information
Release ID: 600003668
Git revision: 23e9d5d22133ca5a7c56b26644ab59a4626bccdb
Build date: 2016-01-20 15:12:22-05
Xamarin addins: bca6749910827de4af7eab7a925ff4ccf2bda06a
Build lane: monodevelop-lion-roslyn-dark-skin-64bit

Operating System
Mac OS X 10.11.3
Darwin macbook.home 15.3.0 Darwin Kernel Version 15.3.0
    Thu Dec 10 18:40:58 PST 2015
    root:xnu-3248.30.4~1/RELEASE_X86_64 x86_64
Comment 1 Jeffrey Stedfast 2016-03-03 18:57:10 UTC
A workaround for this is to add a key to your Entitlements.plist:


I've fixed XS to properly set this key in the publishing workflow for cycle7 aka XS 6.0 which is the next stable version we'll be releasing.