title: Signing my Mac pkg works but installation fails?
body: <p><strong>I'm signing my mac package using this commandline:</strong></p>
  
  <pre><code>Volumes/Auxiliary\ Tools/PackageMaker.app/Contents/MacOS/PackageMaker \
  --sign /Users/company/src/clients/linux-client/mac/company_client_installer.pkg \
  --certificate "Developer ID Application: company"
  </code></pre>
  
  <p><strong>Signing works, but installation fails with error. This is the relevant part in the install.log:</strong></p>
  
  <pre><code>Oct 16 16:59:33 mac installd[57355]: PackageKit: Install Failed: Error Domain=PKInstallErrorDomain Code=102 "The package “company_client_installer.pkg” is untrusted." UserInfo=0x106a2be30 {NSLocalizedDescription=The package “company_client_installer.pkg” is untrusted., NSURL=file://localhost/Users/company/src/clients/linux-client/mac/company_client_installer.pkg#companyClient.pkg, PKInstallPackageIdentifier=com.company.company_client_installer.pkg, NSUnderlyingError=0x7ffd2a52c900 "The operation couldn’t be completed. CSSMERR_TP_NOT_TRUSTED"} {
  1674             NSLocalizedDescription = "The package \U201ccompany_client_installer.pkg\U201d is untrusted.";
  1675             NSURL = "file://localhost/Users/company/src/clients/linux-client/mac/company_client_installer.pkg#companyClient.pkg";
  1676             NSUnderlyingError = "Error Domain=NSOSStatusErrorDomain Code=-2147409622 \"The operation couldn\U2019t be completed. CSSMERR_TP_NOT_TRUSTED\" UserInfo=0x7ff     d2a5573b0 {SecTrustResult=5, PKTrustLevel=PKTrustLevelNotTrusted, NSLocalizedFailureReason=CSSMERR_TP_NOT_TRUSTED}";
  1677             PKInstallPackageIdentifier = "com.company.company_client_installer.pkg";
  </code></pre>
  
  <p><strong>If I check the signature using pkgutil, it return:</strong></p>
  
  <pre><code>pkgutil --check-signature company_client_installer.pkg
  Package "company_client_installer.pkg":
    Status: signed by a certificate trusted by Mac OS X
    Certificate Chain:
      1. Developer ID Application: company
      2. Developer ID Certification Authority
      3. Apple Root CA
  </code></pre>
  
  <p>I try'd to evaluate my certificate in "Keychain Access" and it reports "<strong>no root cert found</strong>" but indicates the certificate as "<strong>valid</strong>" with green checkmark.</p>
  
  <p>I'm totally confused now. What am I'm doing wrong here? Any idea?</p>
  
  <p>Volker</p>