lldb ...

[René J.V. Bertin]

On Friday September 09 2016 14:25:53 Rainer Müller wrote:

>I think you misunderstand this sentence. codesign will search in this
>keychain for the certificate itself, but the keychain will not be used
>to find other certificates in the certificate chain (all intermediates
>up to a root CA). With a self-signed certificate, there is no additional
>certificate in the chain.

In my experience the security framework simply doesn't find keychains that haven't been added to the search list, not even if you just created that keychain via the Security framework itself (as opposed to installing a pre-existing keychain file from some source).

R.