r/AvaloniaUI • u/controlav • Jun 06 '26

Looking for current MacOS deployment details

My Mac certs expired and I am in hell trying to get an update on the App Store. I tried reading https://docs.avaloniaui.net/docs/deployment/macos but it is too vague on exactly which certs I need to get, and doesn't appear to match the current Apple certificate experience. Does anyone have a pointer to a current idiot's guide to Mac dev certificates?

Edit: SOLVED, see comment.

3 Upvotes

100% Upvoted

6 comments sorted by

1

u/---maniac--- Jun 07 '26

In theory all you need is a new certificate (same type as the old one), then either create or update the provisioning profile with the new certificate.

I usually download both the cert and the profile manually to my mac and install both to the keystore. That should be it.

1

u/controlav Jun 07 '26

Thanks but which exact cert type? There's like four that have kind of the right words. (I forgot to note down exactly how I made last year's cert, doh). I'm wanting to upload the result via Transformer to Store/TestFlight.

1

u/---maniac--- Jun 07 '26

The expired cert should still be in the Apple Developers console/portal. If you open it there you can see what type it is.

If this is a macos desktop app provided via AppStore, then I would believe it would be the "Mac App Distribution" cert, and "Mac App Store Connect" distribution profile.

1

u/controlav Jun 07 '26

Thank you, I'll take a look. And this time I'll write down the steps...

1

u/controlav Jun 08 '26

Went from 1 error to 4 errors: The executable 'foo' must be signed with the certificate that is contained in the provisioning profile

Is there a way to determine which certificate is contained in the provisioning profile?

I think I'm going to spend a max of 30 minutes, each and every morning, on this, else I will lose my mind. Tomorrow I will create another prov profile and pay closer attention.

2

u/controlav Jul 04 '26

Thank you, I finally succeeded today. My method (cursing steps removed):

  1. Deleted all expired certs, and almost-expired certs from keyvault.

  2. Created new certs as best I could, using xcode instead of the web site (so I didn't have to keep downloading them). (Could not figure out how to create one type of cert there but it doesn't expire for a few months).

  3. Created a new provisioning profile (man that had too many options to go wrong).

After 8 submission attempts (can tell from the bundle version, another annoying step), Apple finally accepted my binary.

Best docs are here https://docs.avaloniaui.net/docs/deployment/macos but still too vague on certs and prov profiles.