Packaging macOS applications with a self-signed certificate fails

Using electron-osx-sign-tf@1.0.0 which I assume is something like a recent master of this repo (see #82).

Using a self-signed certificate passes codesign --verify but does not pass spctl --assess aka Gatekeeper.

Error: Failed to pass Gatekeeper: : Error: Command failed: spctl --assess --type execute --verbose --ignore-cache --no-cache dist/mac/MyApp.app
dist/mac/MyApp.app: rejected
    at node_modules/electron-osx-sign-tf/index.js:215:12
    at node_modules/electron-osx-sign-tf/index.js:302:64

In my understanding spctl failing is expected and can not be circumented with self-signed certificates and is the equivalent of seeing “This application is from an unidentified developer” when trying to execute the given application.

However I think letting self-signed applications through is still a valid use case, because:

• Automatic updates require signed applications (self-signed are fine).
• Self-signed applications will still be verified for integrity an not execute when currupted.

Maybe have an option to opt-out from the spctl check?

[cheton]

You can run sudo spctl --master-disable to temporarily bypass Gatekeeper before signing macOS apps.

[develar]

Fixed in electron-builder 8.2.0 (https://github.com/electron-userland/electron-builder/issues/890).