How can we create a certificate with the following Extended Key Usage extension using OpenSSL?
Extended Key Usage extension, critical, with a purpose containing Developer ID Installer Package Code Signing (1.2.840.113635.100.4.131.2.840.113635.100.4.13)
Apple's developer tool productsign
requires the signing certificate to conform to the Installer Package Signing Certificate profile described in Certification Authority Certification Practice Statement Developer ID (page 14 of 18).
I would like to sign our product preview releases with our own certificates, rather than those issued by Apple.