User:Edransch/MacSigningGuide

Signing Mozilla Apps Without the Signing Server

Firefox and Thunderbird are built using Mozilla's Release Automation infrastructure. On Mac OSX, part of this infrastructure is automatic signing of the '.app' folder using Apple's codesign tool. For projects that don't use Mozilla's Release Automation and would like to prepare for the release of OS 10.8 Mountain Lion, this guide should provide some insight into how to make sure applications are signed correctly using Apple's codesign tool. Apple's <a href='http://developer.apple.com/library/mac/#documentation/Security/Conceptual/CodeSigningGuide/Introduction/Introduction.html'>Code Signing Guide</a> is also a good resource on the subject.

Getting a Signing Certificate

For test and debug purposes, the easiest way to get a signing certificate is to use Apple's Keychain to create one. There are good instructions available <a href='http://developer.apple.com/library/mac/#documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html'>here</a>.