Hello Apple Developer Support Team,
I’m facing an issue stapling notarization tickets to my signed macOS installer package (.pkg).
What I’ve done so far:
Code-signed my .app with Developer ID certificate.
Created a signed installer package (.pkg) using pkgbuild.
Submitted the package to Apple notarization via xcrun notarytool submit ... --wait. Status: Accepted.
Tried stapling using xcrun stapler staple -v IPMPlus_Arm_Installer_signed.pkg, but it fails with Error 65.
xcrun stapler validate reports no ticket stapled.
Observations:
Curl tests to CloudKit endpoints return 404 or NOT_FOUND errors.
Port 443 connectivity to api.apple-cloudkit.com and gs.apple.com works.
Retried stapling from multiple networks, including a mobile hotspot. Same result.
System time is synced; package signature is valid (pkgutil --check-signature).
Questions:
Is this a known issue with stapler / CloudKit endpoints?
Is there a workaround to successfully staple a notarization ticket to a signed .pkg?
Any guidance would be highly appreciated.
Topic:
Code Signing
SubTopic:
Notarization
Tags: