Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

CI error: signing certs invalid

See original GitHub issue

The CI is currently showing broken tests for MacOS signing. I was unable to repro locally in using my personal certs, codesign completely properly. I added DEBUG='electron-builder' to the TracisCI config and was able to isolate the error to expired certificates.

  • skipped macOS application code signing  reason=cannot find valid "Developer ID Application" identity or custom non-Apple code signing certificate, see https://electron.build/code-signing allIdentities=
		1) C9A30EAD8807BE62058F94B4385B53A7BE3C9392 "Mac Developer: Vladimir Krivosheev (744739DJ4Y)" (CSSMERR_TP_CERT_EXPIRED)
		2) 44DE023F1769CEF2068AA042F595EE95D381AC6C "Developer ID Installer: Vladimir Krivosheev (X8C9Z9L4HW)" (CSSMERR_TP_CERT_EXPIRED)
		3) 2ABC71002FE96EBE6536C4AECC88013D6EB50443 "Developer ID Application: Vladimir Krivosheev (X8C9Z9L4HW)" (CSSMERR_TP_CERT_EXPIRED)
		4) 37CAC6B3B3E04B7FA1C47DDF75B204A9C27350B8 "3rd Party Mac Developer Installer: Vladimir Krivosheev (X8C9Z9L4HW)" (CSSMERR_TP_CERT_EXPIRED)
		5) 42D1E4025947845C59046BB7196279B9D9F3426A "3rd Party Mac Developer Application: Vladimir Krivosheev (X8C9Z9L4HW)" (CSSMERR_TP_CERT_EXPIRED)
		   5 identities found
                                              
		Valid identities only
		   0 valid identities found

@develar can you please regenerate Apple Dev Certs for the unit tests?

I’m unable to update the certificates myself for this as my Apple dev account is through my work. I believe you’d have the master CSC_LINK_PASSWORD for the CI for reuse as well.

Issue Analytics

State:
Created 3 years ago
Comments:10 (2 by maintainers)

Top GitHub Comments

1reaction

develarcommented, Mar 17, 2021

Where can we generate a cert for Windows?

For Windows you cannot get cert easily. And you don’t have to. Just generate some code signing cert yourself and it will be enough to test code signing. Screenshot 2021-03-17 at 08 01 59

Maybe even for macOS self-signed code signing certificate will be enough, but I doubt.

0reactions

mmaiettacommented, Apr 17, 2021

@develar all tests have been fixed in #5806. Can you please cut a new release version? 🙂

Top Results From Across the Web

Troubleshooting SSL - GitLab Docs

This error indicates that an incomplete certificate chain is being presented by the server. To fix this error, you will need to replace...

Certificate Not Trusted | View Security Certificate Errors

Self-Signed Certificates One possible cause of this error is that a self-signed certificate is installed on the server. Self-signed certificates aren't trusted ...

Invalid Provisioning Profile. The … | Apple Developer Forums

All provisioning profiles are valid and code signing certs valid, we are using the App Store Connect API and key is active. Any...

How to resolve "unable to find valid certification path to ... - JFrog

During replication and other tasks that need to connect to a remote server, you might see the following error message: · This indicates...

Jenkins "unable to find valid certification path to requested ...

That error is a common error message reported by the Java Virtual Machine. This is caused when the Java environment does not have...