I'm trying to sign an OS X installer package using the command line utility productsign, but get an error.
productsign --sign "Developer ID Installer: XYZ" input.pkg output.pkg
productsign: error: Could not find appropriate signing identity for “Developer ID Installer: XYZ”.
When I open Keychain Access, I'm able to see the cert that I created at developer.apple.com and imported into my login Keychain. Its Common Name matches my command line parameter: "Developer ID Installer: XYZ". Is there any way to debug this particular error?
Check for the private key in your keychain. You need both the key and the certificate to do the signing (together Apple calls this an "identity").