Revoking certificates on macOS fails

[tsugua]

When trying to add developer ID to a Mac app. I have the developer certificates in my Keychain but RM doesn't seem to be finding them. The error says the certificate can only be revoked by developer support.

 Error None of the available certificates (1) is installed on the local machine. Revoking...
rake aborted!
Spaceship::Client::UnexpectedResponse: {"responseId"=>"f040e3d3-2cb2-4a54-9e1d-c28bb6c16c69", "resultCode"=>7475, "resultString"=>"This certificate can only be revoked by Apple Developer Program Support.
https://developer.apple.com/support", "userString"=>"This certificate can only be revoked by Apple Developer Program Support.
https://developer.apple.com/support", "creationTimestamp"=>"2017-01-03T22:44:48Z", "protocolVersion"=>"QH65B2", "userLocale"=>"en_US", "requestUrl"=>"https://developer.apple.com/services-account/QH65B2/account/mac/certificate/revokeCertificate.action", "httpCode"=>200}

[MarkVillacampa]

I assume your certificate is of type :developer_id. Those certificates can indeed only be revoked by Apple, cannot be manually revoked.

Maybe we should add special handling for that type, and don't revoke the old certificate. Instead remind the user to install the certificate and private key from the other computer, or offer to create a new one.

You say the certificate is in the keychain, but is the private key in the keychain too?

[tsugua]

Yes it is a :developer_id certificate. The private key also seems to be in the keychain. I think the error message might be useful. Just direct the user to the Apple Portal.

Image of certificate in keychain:
https://db.tt/i42tQuai28

[MarkVillacampa]

Interesting. Can you try manually downloading the certificate from the Provisioning Portal, installing it in the keychain, and making sure it's not a different certificate?

If everything seems fine I will prepare a script for you to run on your machine to better diagnose what's going on.

[tsugua]

It definitely is the same certificate. I deleted and re-installed it and it has the same info.