macOS El Cap developers - tutorials for CodeSign and Sandbox?

[gsahli]

I need to get up to speed on Apple's latest security requirements.
Developer notes from Apple aren't helping. Does anyone know where I can get this specific help?

 

[hokan]

Have you looked at the "App Distribution Guide" at:
https://developer.apple.com/library...roduction.html#//apple_ref/doc/uid/TP40012582

while somewhat awkward to read it does cover signing certificates, developer ids and similar issues, needed to sign apps for Sandboxing and some other Apple services.

This "App Distribution Quick Start" may be a simpler intro to the same subject (I haven't read it):

https://developer.apple.com/library...roduction.html#//apple_ref/doc/uid/TP40013839

 

[gsahli]

Have you looked at the "App Distribution Guide"

Read both once - weren't specific enough for me to move forward.

 

[superscape]

Read both once - weren't specific enough for me to move forward.

Are you struggling with any points specifically?

 

[gsahli]

Are you struggling with any points specifically?

Thanks for jumping in!
How about this one - where do I find my personal developer codesign certificate?
I tried to set an environment variable CODESIGN_IDENTITY and it said my developer ID isn't a valid identity.

More background - I am "trying" to volunteer to be the package manager of open source print drivers for OS X at openprinting.org. These are CUPS modules called drivers, filters and backends.
I've had a developer ID for 16+ years, and recently updated from Yosemite to El Cap. Latest XCode is installed. Last time I tried building anything was pre-Mavericks.

 

[superscape]

Thanks for jumping in!
How about this one - where do I find my personal developer codesign certificate?
I tried to set an environment variable CODESIGN_IDENTITY and it said my developer ID isn't a valid identity.

Sounds like you're doing something a little outside my experience of fairly simple app development. Maybe someone else will be more help than me. However, I'm guessing your certificates will be in Keychain Access. Never had to root them out manually though - that's what's confusing me about your situation.

 

[briloronmacrumo]

Thanks for jumping in!
How about this one - where do I find my personal developer codesign certificate?
I tried to set an environment variable CODESIGN_IDENTITY and it said my developer ID isn't a valid identity.

If you have an Apple Developer account go to https://developer.apple.com/membercenter/index.action and login. Pick the certificates option. Personally I have signing certificates( which should be 'login' certificates ) for both the MAS ( Mac App Store ) and Developer ID ( signed apps NOT delivered via MAS ) but you might only need Developer ID. Also before downloading anything open Keychain Access app (/Applications/Utilities ) and create a Certificate Authority file ( Certificate Assisstant>>Create a Certificate Authority ) and save the file on your desktop of some easy place to access. Now do the downloads from the Apple site. IIRC it asks you to select the Certificate Authority file. Go ahead and do that. Download the certificates to your desktop ( where doesn't matter ). You should be able to double-click each cert file in the Finder and add them to your login keychain list. Also they should now be visible in Xcode 7 ( Preferences>>>Accounts ) click on "View Details"

I haven't posted ALL details but getting to this point is important and typically all can be managed inside Xcode from here forward. No time now to post more.

 

[gsahli]

Yup, that helped.

Anyone have a tutorial on sandboxing and "requirements" for commandline utilities? (ie, those within the CUPS filter chain.)

Thanks.