adt code sign GateKeeper rejection for OS X AIR app

Report · Sep 18, 2014

I'm having a problem getting a signed OS X AIR captive runtime bundle app to pass the GateKeeper signature smell test.

Here are the digestible facts, in list format:

- App is multi-platform OS X, Windows, iOS, Android, but let's just focus on OS X for now.

- Application is a standalone captive runtime bundle app.

- Dev machine running OS X 10.9.5 (with Xcode 6.0.1).

- Built with AIR 15.0.0.258 Beta.

- The certificate is a certificate from comodo.com guaranteed to work with AIR and OS X Digital Code Signing, Code Signing Certificates - COMODO

- Tried compiling/packing with IntelliJ IDEA 14 beta and adt command line, both with same fail results.

- Manual packaging method used: Adobe AIR * Packaging a captive runtime bundle for desktop computers

The adt command fires without a hitch, the command asks for the p12 password, I can see the certificate authorities get pinged as the packaging progresses. The resulting app seems fine and runs well with GateKeeper disabled. However, GateKeeper does not like the resulting app. I need this app to launch flawlessly on all user's systems (that's why I bought a certificate).

Here's the disappointing results from Terminal:

spctl -a -t exec -vv myPrettyPony.app

rejected

source=no usable signature

Report · Sep 20, 2014

This is what I'm trying to avoid:

Report · Sep 26, 2014

I would suggest that those interested take a look at thread Tutorial on publishing Flex/Air app for Mac App Store or just using Developer ID for general distrib...

However, since that thread is marked as answered, I want to leave this thread open until I find an answer to my particular question: What are the exact steps to properly package and codesign an OS X AIR app for independent distribution to OS X 10.9.5?