Certificate has an invalid issuer - error

Getting into LiveCode for iOS? Ask your questions here.

Moderators: Klaus, FourthWorld, heatherlaine, kevinmiller, robinmiller

Post Reply
quailcreek
Posts: 746
Joined: Sun Feb 04, 2007 11:01 pm
Location: McKenna, WA

Certificate has an invalid issuer - error

Post by quailcreek » Mon Feb 15, 2016 2:16 am

I’m having an odd problem… go figure. I have one development certificate with 3 app IDs using it. Yesterday I added a fourth app ID and all day everything went fine. I compiled the apps and loaded them each to my device a number of times. Today when I tried to compile I get an error “could not find a valid identity to use for the selected profile”. I checked on the member center and the certificate expires in August.

I looked in the keychain and the certificate says: This certificate has an invalid issuer

I deleted the certificate and downloaded it again and installed it. Same result. Has anybody run into this or is it maybe a Sunday bug in the Apple website?
Tom
MacBook Pro OS Mojave 10.14

LCNeil
Livecode Staff Member
Livecode Staff Member
Posts: 1223
Joined: Wed Oct 03, 2012 4:07 pm

Re: Certificate has an invalid issuer - error

Post by LCNeil » Mon Feb 15, 2016 4:56 pm

Hi Tom,

I would try revoking and re-generating the certificate from your Apple developer account, deleting any existing certificates on your Mac and then creating/installing a new provisioning profile.

Another thing to try is a wildcard app ID, this means you do not have to create a unique App ID for every app you develop (until its time to deploy to the iOS store).

Kind Regards,

Neil Roger
--
LiveCode Support Team ~ http://www.livecode.com
--

jessamy99
Posts: 103
Joined: Thu Oct 25, 2012 3:23 pm

Re: Certificate has an invalid issuer - error

Post by jessamy99 » Mon Feb 15, 2016 7:10 pm

Hi Tom,

I have exactly the same error.
This started yesterday afternoon!
I have revoked and replaced all my certificates and provisioning profiles.
I still get the same error!

So I am stuck now, no testing on the device is possible.
I rang apple support and they just emailed me, suggesting I read their forums.

I did read an earlier post where somebody had to revoke and recreate their app signing identity.
I have done this in Xcode, but it still gives the same error.

Does anyone know where to do this within the apple membership portal?
I couldn't find the right place anywhere.

All advice would be gratefully received.
Best wishes, jessamy.

quailcreek
Posts: 746
Joined: Sun Feb 04, 2007 11:01 pm
Location: McKenna, WA

Re: Certificate has an invalid issuer - error

Post by quailcreek » Mon Feb 15, 2016 7:21 pm

Same here, jessamy. I'm totally hozed. I've revoked and recreated a dev cert three time... no-joy.

app signing identity? Is that "Developer ID Application?
Tom
MacBook Pro OS Mojave 10.14

quailcreek
Posts: 746
Joined: Sun Feb 04, 2007 11:01 pm
Location: McKenna, WA

Re: Certificate has an invalid issuer - error

Post by quailcreek » Mon Feb 15, 2016 7:45 pm

Pick renewed certificate and installed directly to keychain. This fix it for me.

I then created an app Id like Neil suggested and then edited all of my provisioning profiles. Whala!

https://developer.apple.com/support/cer ... xpiration/
Tom
MacBook Pro OS Mojave 10.14

jessamy99
Posts: 103
Joined: Thu Oct 25, 2012 3:23 pm

Re: Certificate has an invalid issuer - error

Post by jessamy99 » Mon Feb 15, 2016 8:14 pm

Hi Everyone,

I solved it!!
Here is what to do...

First, in keychain, delete any certificates that come up as invalid.
Then, on all the others, select one.
In the menu bar above, choose File/get info.
A box appears.
Click on the triangle next to the word trust.
In the top field, choose "always trust". This changes all the fields to the same.
Close the box, enter your keychain password.
Repeat for all.

Then create a Request a certificate and save it to desktop.
Next, go to apple members portal and revoke any certificates.
Make a new developers certificate.
Make a new distributing certificate.
Download both, double click and check them in keychain.

Finally, create a provisioning profile (or edit previous one) for developing and distributing.
Download and double click.

To check, open Xcode.
click on Xcode/prefs in menu bar above.
click on your account on the right.
Click on details.
It should now show valid certificates and profiles.

Final test, try to build an app!

Mine works now. I hope this solves the problem for you all.
All the best,
Jessamy.

LCNeil
Livecode Staff Member
Livecode Staff Member
Posts: 1223
Joined: Wed Oct 03, 2012 4:07 pm

Re: Certificate has an invalid issuer - error

Post by LCNeil » Mon Feb 15, 2016 10:39 pm

Looks like this was an issue at Apples end. A post on our Use-List explains more :)

https://www.mail-archive.com/use-liveco ... 71187.html

Kind Regards,

Neil Roger
--
LiveCode Support Team ~ http://www.livecode.com
--

quailcreek
Posts: 746
Joined: Sun Feb 04, 2007 11:01 pm
Location: McKenna, WA

Re: Certificate has an invalid issuer - error

Post by quailcreek » Mon Feb 15, 2016 11:05 pm

Yep... that's the link I posted.
Tom
MacBook Pro OS Mojave 10.14

daveslee
Posts: 2
Joined: Tue Feb 16, 2016 11:00 am

Re: Certificate has an invalid issuer - error

Post by daveslee » Tue Feb 16, 2016 11:35 am

I've followed various instructions to no avail and could really do with some help from experts on this key-chain stuff.

The steps I'm following (that don't work) are:

1. In Keychain Access:
a) Remove all keys related to app development that mention iOS, Mac, iPhone
b) Remove the certificate for Apple Worldwide Developer Relations

2. Go to the Developer centre, certificates section (to get the new certificate to replace the one that caused this mess in the first place)
a) Choose certificates, all, decide to go down the road of requesting certificates manually, clicking the blue link "Certificate Signing Request"
b) At the bottom of the next dialogue, chose download "Worldwide Developer Relations Certificate authority"
c) Double click this in Downloads
d) Look in Keychain Access and the "Apple Worldwide Developer Relations Certificate Authority" is shown as green tick "This certificate is valid"

So far, so good...

* Now the first time I did this process, I did everything manually because xCode wasn't playing nicely
* But I have tried asking xCode 6.4 (which is the match for the LC7 Indy stable release I am using) and that hasn't ever worked smoothly for me...

So back to the manual approach...

3. Let's get a developer certificate...
a. In the Certificates part of the developer centre...
b. Certificates, all, Request certificates manually...
c. Choose iOS App Development and continue...
d. Now back to Keychain Access to make a CSR file...
e. Certificate assistant, Request a certificate...
f. Put in e-mail address, "Common Name" is correctly filled, choose save to disk and put the CSR on the desktop
g. Back to the Developer centre... continue ...
h. Upload the file from the desktop, generate
I. Download the certificate file
j. Double click in Downloads
k. "iPhone Developer: David Slee (xxxxxxx)" appears in Keychain Access
l. but clicking on it shows it has red cross "This certificate has an invalid issuer"

So at this point I get stuck.

Lets try a few things:

* A Mac Mini (for that is what the dev machine is) restart...
- The Apple new cert remains valid.
- My new developer cert is still invalid due to an invalid issuer.

* Delete the iPhone developer cert and let xCode have a go...
- Delete iPhone developer in Keychain access
- Crank up xCode 6.4
- Preferences, accounts...
- Apple ID is correct, company name and agent status all looks OK
- View details...
- No signing identities (makes sense, I deleted them locally)
- Some "hangover" xCode provisioning profiles that have been deleted on the Member Centre
- Press the refresh arrow
-iOS developer appears but shows revoked
-Certificate missing for my company which xCode offers to fix ... Request ...
- iOS Distribution appears but this is also revoked. Click Done
- Back into Keychain Access and both xCode generated certificates for developer and distribution show red cross "This certificate has an invalid issuer".

And now I've run out of sensible things I can do as a non-certificate-specialist!

And I have a live App in the iTunes store that I want to update with some urgent bug fixes.

Can an Apple certification specialist step forward to please help me? I'm at my wits end with this latest Apple obstacle.

Thank you all in advance...

David.
--
Best Regards
Dave Slee

LCNeil
Livecode Staff Member
Livecode Staff Member
Posts: 1223
Joined: Wed Oct 03, 2012 4:07 pm

Re: Certificate has an invalid issuer - error

Post by LCNeil » Tue Feb 16, 2016 11:51 am

Hi David,

This might help you out-

http://stackoverflow.com/questions/3539 ... h-services

Kind Regards,

Neil Roger
--
LiveCode Support Team ~ http://www.livecode.com
--

Armenhui
Posts: 71
Joined: Fri Oct 16, 2015 12:44 pm

Re: Certificate has an invalid issuer - error

Post by Armenhui » Tue Feb 16, 2016 12:02 pm

This is very usefull link, I follow instructions from this linke and solve the problem.
http://stackoverflow.com/questions/3539 ... h-services

daveslee
Posts: 2
Joined: Tue Feb 16, 2016 11:00 am

Re: Certificate has an invalid issuer - error

Post by daveslee » Tue Feb 16, 2016 12:08 pm

Thanks Neil and Armenhui, that advice did the job.

Summary: The expired certificate that is causing all the trouble remains "hanging around" in System in Keychain Access in certain circumstances. Deleting this and downloading the revised certificate fixes everything.

It's pretty scary digging around in things you don't understand. Thanks guys for holding my hand...
--
Best Regards
Dave Slee

Jordy
Posts: 32
Joined: Sat Feb 27, 2016 3:59 am

Re: Certificate has an invalid issuer - error

Post by Jordy » Tue Mar 01, 2016 5:55 pm

I also had this problem and this fixed it.
On the page that says "What certificate do you need"
Scroll all the way to the bottom and click on "Apple worldwide developer certificate"
That will update apples side of the certificate in your keychain
Apples previous version that was in my keychain (maybe cause old computer or outdated Xcode) was called "apple application integration security certificate"
I still have the old one in there also
then I revoked all my old certificates that were invalid issuer and started over fresh

Post Reply

Return to “iOS Deployment”