33

I'm trying to minimize the cost of code-signing certificates necessary to develop a program for Mac OS X and Windows. As far as I can tell, I can't use a 3rd party certificate to sign my OS X program and have it get past GateKeeper, as indicated here.

Can I go the other way and use an Apple Developer certificate to sign the Windows version of my program?

Also related: Non-Apple Issued Code Signing Certificate: Can it Work with Mac OS 10.8 Gatekeeper?

Community
  • 1
  • 1
Scott Driscoll
  • 2,869
  • 2
  • 23
  • 22

3 Answers3

25

Had the same idea some time ago. But I don't think it's possible, because the Apple Developer Certificate is verified (signed) by Apple and I don't think that the Apple Root Certificate is installed on average Windows machines.

Mani
  • 276
  • 4
  • 3
  • 6
    This seems silly. Surely Apple is a bigger and more trustworthy CA than most. What CA does Apple use to sign their own Windows apps (e.g. iTunes)? – Joe Strout Sep 03 '15 at 16:05
  • 1
    I have just checked, and iTunes for Windows is signed with Symantec class 3 signing. – Asu Mar 22 '18 at 12:47
  • I should have come here first and saved myself some time and aggravation. – MikeC Nov 17 '19 at 00:58
7

Hi Joe LTNS I check the status of this question every time my Comodo CS certificate comes up for renewal, because hassle/money vs Apple's

Alas, Apple's CA still not in Windows golden list AFAIK. I checked Apple Software Update under Win10 and its cert issuer is Verisign.

OT Not a cert expert here, but if Apple concocted an intermediate cert that both the CA and Apple could vouch/revoke, not a few Windows devs would pony up for Apple's $100 Dev program for that su-weet 5 year non-MAS codesign cert (and probably dabble in App Store/ios development as a bonus)

VaughnSC
  • 81
  • 1
  • 3
4

Here is a detailed article about it: http://luminaryapps.com/blog/code-signing-and-packaging-windows-apps-on-a-mac/ and more generally about code-signing Windows apps on a Mac. I quote:

Now you need to get a Windows developer certificate. Unfortunately you can't use your Apple certificate (well, actually you can, but it doesn't help because Apple isn't a certificate authority that Windows recognizes). Here is a list of root certificate authorities recognized by Windows.

So this seems to confirm the other answers.

Basj
  • 41,386
  • 99
  • 383
  • 673