Sign with Chia Apple cert on GHA and add Azure Mojave signing (#277)

* Sign with Chia.net signing key
* Codesign on Azure for Mojave
* correct provisionprofile
* Update changelog - rerun Azure signing

.github/workflows/build-macos.yml

@@ -25,8 +25,8 @@ jobs:
     - name: Import Apple app signing certificate
       uses: Apple-Actions/import-codesign-certs@v1
       with:
-        p12-file-base64: ${{ secrets.CERT_APP }}
-        p12-password: ${{ secrets.CERT_PASS }}
+        p12-file-base64: ${{ secrets.APPLE_DEV_ID_APP }}
+        p12-password: ${{ secrets.APPLE_DEV_ID_APP_PASS }}
 
     - name: Install MacOS dependencies
       run: |

CHANGELOG.md

@@ -22,6 +22,7 @@ for setuptools_scm/PEP 440 reasons.
 - All installer ci builds now obtain version information automatically from setuptools_scm and convert it to an installer version number that is appropriate for the platform and type of release (dev versus release.)
 - Plots are now refreshed in the UI after each plot instead of at the end of plotting.
 - We have made performance improvements to plotting speed on all platforms.
+- We now codesign the Apple .dmg installer with the Chia Network developer ID.
 
 ### Fixed
 - Having spaces in the path to a plot or temporary directory caused plotting to fail.

azure-pipelines.yml

@@ -26,6 +26,15 @@ steps:
       versionSpec: "$(python.version)"
     displayName: "Use Python $(python.version)"
 
+  # Install Apple certificate
+  # Install an Apple certificate required to build on a macOS agent machine
+  - task: InstallAppleCertificate@2
+    inputs:
+      certSecureFile: 'chia-apple-dev-id-app.p12'
+      certPwd: $(CHIA_APPLE_DEV_ID_APP_PASS)
+      keychain: temp
+      deleteCert: true
+
   #  since we're installing miniupnpc & setproctitle below,
   #  only cbor2 will end up in wheels/
   - script: |

build_scripts/build_macos.sh

@@ -28,8 +28,8 @@ cd electron-react
 echo "npm build"
 npm install
 npm run build
-electron-packager . Chia --asar.unpack="**/daemon/**" --platform=darwin --icon=src/assets/img/Chia.icns --overwrite --app-bundle-id=straya.domain.chia
-electron-osx-sign Chia-darwin-x64/Chia.app --no-gatekeeper-assess  --platform=darwin  --hardened-runtime --provisioning-profile=embedded.provisionprofile --entitlements=entitlements.mac.plist --entitlements-inherit=entitlements.mac.plist
+electron-packager . Chia --asar.unpack="**/daemon/**" --platform=darwin --icon=src/assets/img/Chia.icns --overwrite --app-bundle-id=net.chia.blockchain
+electron-osx-sign Chia-darwin-x64/Chia.app --no-gatekeeper-assess  --platform=darwin  --hardened-runtime --provisioning-profile=chiablockchain.provisionprofile --entitlements=entitlements.mac.plist --entitlements-inherit=entitlements.mac.plist
 mv Chia-darwin-x64 ../build_scripts/dist/
 cd ../build_scripts