Expired Certificate Explanation is Incorrect for macOS apps with Provisioning Profiles

Originator:greg
Number:rdar://30717170 Date Originated:2017-02-25
Status:Open Resolved:
Product:Documentation Product Version:N/A
Classification:Crash/Hang/Data Loss Reproducible:Always
 
Description:
The section on this page https://developer.apple.com/support/certificates/ under Expired or Revoked Certificates / Developer ID Application Certificate and Developer ID Installer Certificate (Mac applications) is incorrect or at least misleading. macOS apps with Provisioning Profiles whose profiles expire (typically in lock step with their certificate) will crash on launch.

Steps to reproduce:
Download and launch an application with an expired Provisioning Profile. For example, our own PDFpen:

https://smilesoftware.com/downloads/test/PDFpen_8.3.1.zip

Expected Results:
The documentation should explain that macOS apps signed with Developer ID Application Certificates which have Provisioning Profiles will crash on launch once their Provisioning Profiles expire and that the expiration of their Provisioning Profiles is typically concurrent with the expiration of their signing certificates.

Actual Results:
No mention is made of this particularly serious case in the documentation.

Documentation Title & URL:
"Certificates"
https://developer.apple.com/support/certificates/ 

Additional Notes:
Background on this issue:

Brief:
http://us1.campaign-archive2.com/?u=fc71b2e97a3e7b5f40ced52ea&id=c51d9ddb6b&e=1f89ce606e

Long & detailed:
https://blog.agilebits.com/2017/02/21/certificates-provisioning-profiles-and-expiration-dates-the-perfect-storm/

Comments

it looks like the rdar numbers in the agilebits post got reversed, this is a dupe of 30631939

By rarichter at Feb. 25, 2017, 10:07 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!