LLDB Codesigning Identities

The debugsign tool contains the logic necessary to configure and enable automation-friendly codesigning for LLDB builds on Darwin systems.

The import sub-command requires a P12 archive containing a codesigning identity. A P12 archive compatible with the debugsign tool can produced using the following procedure:

Generating a Codesigning Identity

• Open Keychain Access
• -> App Menu
• -> Certificate Assistant
• -> Create a Certificate

In the dialog that appears:

• Name: lldb_codesign
• Certificate Type: Code Signing
• use defaults for all other values and complete the dialog sequence

The identity (private key, public key, self-signed certificate) will be created in the default login keychain. Export the identity:

• Select login keychain
• Select My Certificates
• Select entire lldb_codesign item (not sub-components)
• File -> Export Items
• Select File Format: Personal Information Exchange (.p12)
• When asked for a password to protect the exported archive, enter lldb_codesign for both options.
• If Keychain Access asks for permission to export, click Allow

The resulting .p12 file can be passed to debugsign's import sub-command.

Using the debugsign Script

Once you've created the .p12 archive, you can use it to enable codesigning on any number of machines for as long as the generated certificate is valid.

The general use case for debugsign is described in the script's help output: debugsign help