AppStore Submission – Missing or invalid signature –

I’m trying to submit an iOS app to AppStore and I’m having the following error:

ERROR ITMS-9000: “Missing or invalid signature. The bundle
‘’ at bundle path
‘Payload/’ is not signed using an
Apple submission certificate.”

  • localize existing iOS app
  • Round top corners of a UIView and add border
  • draw only top, right, and bottom border around a uilabel
  • Framework not found IOSurface for architecture arm64
  • How to load custom cell ( xib) in UICollectionView cell using swift
  • SKNode position not working, always going to default 0,0
  • I’ve submitted this app before I’ve never had this problem. Does anybody know if there is any recent change?

    I could submit the app about 6 hours before having this error. Then, my app was rejected with this message:

    This bundle is invalid – New apps and app updates submitted to the App
    Store must be built with public (GM) versions of Xcode 5.1.1 or higher
    and iOS 7 SDK. Do not submit apps built with beta software.

    After this, couldn’t submit anymore.


    Google has made an announcement about this:

    A new version was released, solving the problem.

    12 Solutions Collect From Internet About “AppStore Submission – Missing or invalid signature –”

    Google released the version 1.7.1 of the google plus sdk.

    I created a new podspec for the 1.7.1 version as the previous owner is not reachable.

    Just add into your Podfile:

    pod 'googleplus-ios-sdk', '~> 1.7.1'

    Just remove files below and build your app as usual!

    • GooglePlus.bundle/GPPSignIn3PResources
    • GooglePlus.bundle/GPPCommonSharedResources.bundle/GPPCommonSharedResources
    • GooglePlus.bundle/GPPShareboxSharedResources.bundle/GPPShareboxSharedResources

    Adding the --deep flag to Other Code Signing Flags (OTHER_CODE_SIGN_FLAGS) in the Project (not target) settings seems to fix this.

    The correct fix is to upgrade to the 1.7.1 version of the Google Plus iOS SDK.
    It seems to have been specifically released to fix this problem.

    If you diff the 1.7.0 and 1.7.1 bundles you will see that no files were added, but three files were deleted : GPPSignIn3PResources, GPPShareboxSharedResources and GPPCommonSharedResources – the three files that the App Store was complaining about.

    Adding --deep flag didn’t help me, so I solved the issue in a simple and elegant way (sarcasm detected). I removed Google+ SDK from Podfile, then downloaded SDK from here and installed it in a old-fashioned way.

    my solution for Google Plus looked this way

    • deleted the 3 bundles from frameworks from my project
    • downloaded new Version 1.7.0 (had to upgrade anyway)
    • i opened the GooglePlus.bundle and removed 3 files (GPPSignIn3PResources,GPPShareboxSharedResources.bundle,GPPCommonSharedResources.bundle) as all 3 files will give you a warning in itunes
    • I added the 3 bundles back to frameworks
    • i tested my Google + login in app … works
    • submitted …

    and run into a new issue (arm64 requirement), unrelated to this one 🙂

    I think this should work if you don’t need the resource files like login button.

    If –deep doesn’t work, then chances are that the bundle is simply resources and does not actually have any executable file. Delete its Info.plist and you’ll be good. If there’s some reason you actually need Info.plist, at least delete the CFBundleExecutable key.

    I had the same error when I tried to submit the app with xcode 6.1. Nothing worked and I really tried everything.
    Then I found a solution on apple developer forums. It worked for me:

    • Go into Keychain Access
    • Go into Login keychain
    • Delete Apple World Wide Developer Relations Certificate Authority
    • Go into System keychain
    • Delete Apple World Wide Developer Relations Certificate Authority
    • Download new WWDR certificate
    • Install it in Login keychain (just clicking it did that)


    This issue appears to have been fixed today by Apple, after being broken for ~24 hours.

    Submitting the same app today, with no changes to the .bundle, no longer throws the error.

    --deep code signing of the bundle is not required.

    (Note that I did not test this with the specific Google bundle that the question references. The Resources Bundle that our app uses, though, now works correctly and no longer throws the error.)

    Google just released an updated version 1.7.1, which can be downloaded from their website Currently it’s still not mentioned in their Release Notes though.

    If you’re using cocoapods you can copy the current 1.7.0 podspec, create a local one and change all the version references in their to 1.7.1 until the new one is merged into the official cocoapods repo.

    You should also remove info.plist files




    By removing all Info.plist file form goolepplus.bundle file work for me.