Moves signing application before creating the initial dmg image in order to keep the signing information, as it is not saved later when we modify the image.

resources/install/build.xml

@@ -1320,6 +1320,9 @@
       available languages, so macosx can switch languages -->
       <antcall target="dmg-create-language-folders" />
 
+      <!-- sign before creating the image, so the signed app goes into it -->
+      <antcall target="macosx-sign-app"/>
+
       <!-- Create a temporary Disk Image -->
       <exec executable="/usr/bin/hdiutil" os="Mac OS X" failonerror="true">
         <arg value="create"/>
@@ -1358,8 +1361,6 @@
       <!-- Add a symbolic link to the Applications directory -->
       <symlink link="${release}/${application.name}" resource="/Applications"/>
 
-      <antcall target="macosx-sign-app"/>
-
       <!-- Detach the temporary image -->
       <exec executable="/usr/bin/hdiutil" os="Mac OS X" failonerror="true">
         <arg value="detach"/>
@@ -1412,6 +1413,13 @@
             <arg value="${macosx.app.dir}/${application.name}.app"/>
         </exec>
 
+        <!-- just print sign info
+            To test is sign accepted do $ sudo spctl -a -v -->
+        <exec executable="/usr/bin/codesign" os="Mac OS X" failonerror="true">
+            <arg value="-dvvv"/>
+            <arg value="${macosx.app.dir}/${application.name}.app"/>
+        </exec>
+
         <!-- locking again -->
         <exec executable="/usr/bin/security" os="Mac OS X" failonerror="true">
             <arg value="lock-keychain"/>