Mas pkg invalid, and workaround is ineffective

• Version: 6.0.10

• Target: MAS

I am trying to build for mas using the vue-cli-plugin-electron-builder module, which currently only supports Electron 6.0.

I am able to build and successfully sign a mas pkg, but it has a number of verification issues when loaded into Transporter. Here is a log:

ERROR ITMS-90277: "Invalid Bundle Identifier. The application bundle contains a tool or framework Electron Helper (GPU) [com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (GPU).app] using the bundle identifier 'com.beadz-drums.beadz.helper.(GPU)', which is not a valid bundle identifier."

ERROR ITMS-90277: "Invalid Bundle Identifier. The application bundle contains a tool or framework Electron Helper (Plugin) [com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (Plugin).app] using the bundle identifier 'com.beadz-drums.beadz.helper.(Plugin)', which is not a valid bundle identifier."

ERROR ITMS-90277: "Invalid Bundle Identifier. The application bundle contains a tool or framework Electron Helper (Renderer) [com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (Renderer).app] using the bundle identifier 'com.beadz-drums.beadz.helper.(Renderer)', which is not a valid bundle identifier."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (GPU).app/Contents/MacOS/Beadz Helper (GPU)' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (Plugin).app/Contents/MacOS/Beadz Helper (Plugin)' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (Renderer).app/Contents/MacOS/Beadz Helper (Renderer)' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper.app/Contents/MacOS/Beadz Helper' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libEGL.dylib' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libGLESv2.dylib' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libswiftshader_libEGL.dylib' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libswiftshader_libGLESv2.dylib' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Library/LoginItems/Beadz Login Helper.app/Contents/MacOS/Beadz Login Helper' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90284: "Invalid Code Signing. The executable 'com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/MacOS/Beadz' must be signed with the certificate that is contained in the provisioning profile."

ERROR ITMS-90296: "App sandbox not enabled. The following executables must include the "com.apple.security.app-sandbox" entitlement with a Boolean value of true in the entitlements property list: [( "com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (GPU).app/Contents/MacOS/Beadz Helper (GPU)", "com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (Plugin).app/Contents/MacOS/Beadz Helper (Plugin)", "com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper (Renderer).app/Contents/MacOS/Beadz Helper (Renderer)", "com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Frameworks/Beadz Helper.app/Contents/MacOS/Beadz Helper", "com.beadz-drums.beadz.pkg/Payload/Beadz.app/Contents/Library/LoginItems/Beadz Login Helper.app/Contents/MacOS/Beadz Login Helper" )] Refer to App Sandbox page at https://developer.apple.com/devcenter/mac/app-sandbox/ for more information on sandboxing your app."

I have addressed these issues by following the instruction at https://david.dev/electron-cannot-build-mas-on-os-x-mojave/ (which references official/accepted workarounds).

Other info:

App id: com.beadz-drums.beadz Builder config (from vue.config.js):

        mac: {
          category: 'public.app-category.music',
          entitlements: 'build/entitlements.mac.plist',
          icon: 'build/icon.icns',
          target: ['mas']
        },
        mas: {
          type: 'distribution',
          category: 'public.app-category.music',
          entitlements: 'build/entitlements.mas.plist',
          icon: 'build/icon.icns',
          target: ['pkg']
        }

Thank you.

[kellerchch]

Thanks @Heydon I did message some 15 electron devs who seem experienced with this electron-builder package so thanks. I did see that https://github.com/electron-userland/electron-builder/releases/tag/v22.3.1 was released 4 days ago and we haven’t tried upgrading to try that. Will do. Thanks.

[marckohlbrugge]

@sangeeth96 Where you able to find a workaround for this? I’m having similar issues trying to get a valid .pkg for MAS.