Option for force identity validation

[tatgean]

• Version: 18.5.1

• Target: mac

Can we have an option to force identity validation for code signing on mac applications?

In electron-osx-sign 0.4.5, it has been switched to use the identity hash instead of the identity name in order to fix this issue.

However, it only works when identity-validation is set to true. See the below code segments.

• electron-osx-sign/sign.js, which only tries to call findIdentitiesAsync when identity-validation is true.
• electron-osx-sign/util-identities.js, where only findIdentitiesAsync() will return the identity with its hash, new Identity() will not.
• electron-builder/macPackager.ts, where identity-validation is hardcoded as false.

As a result, making the identity name being used instead of the identity hash, which produce the error mentioned in this issue again.

Thanks a lot.