Framework Signature Validation Failed

Read this guide if you see errors from Xcode similar to:

The signature of “PSPDFKit.xcframework” cannot be verified.

The signing certificate has been revoked (CSSMERR_TP_CERT_REVOKED)

The signature of “PSPDFKit.xcframework” cannot be validated and may have been compromised.

PSPDFKit 13.1 for iOS and later are distributed as cryptographically signed XCFrameworks. You can read more in Apple’s documentation: Verifying the origin of your XCFrameworks.

The certificates we use for signing have a lifetime of one year. During the process of updating our certificate on 22 February 2024, we made a mistake and revoked the old certificate, leading to PSPDFKit 13.1 to 13.3 not having valid signatures. PSPDFKit 13.3.1 and later have valid signatures. We recommend updating to the latest version of PSPDFKit.

To manually resolve this issue for versions 13.1 to 13.3, remove the _CodeSignature folder in all PSPDFKit .xcframeworks. This results in the frameworks being unsigned. Our website and downloads use HTTPS, which likely provides an acceptable level of security. You may have to select Accept Change due to the removal of the signature for building to succeed again. See the Diagnose failures caused when a code signature is removed section in Apple’s documentation for more details.