1. Launch XCode 3.2.3 on MacOS 10.6.3.
2. File / New Project
   • iPhone OS Application
   • OpenGL ES Application
3. Save As: DaliClockTest
4. Build succeeds.

5. Set "Active Configuration" to "Release".

6. Add a 57x57 icon to the project ("DaliClockPhone57.png")
7. Edit "DaliClockTest-Info.plist":
   • Set CFBundleIdentifier to org.jwz.iDaliClock
   • Set CFBundleIconFile to DaliClockPhone57.png
8. Get Info on Target "DaliClockTest"
   • Set "Code Signing Identity / Any iPhone OS Device" to "iPhone Distribution"
     (currently matches "iPhone Distribution: Jamie Zawinski")
9. Build. Fails the same old way:
   • Application failed codesign verification. The signature was invalid, or it was not signed with an Apple submission certificate. (-19011)

In the Organizer window, Developer Profile lists "iPhone Distribution: Jamie Zawinski", Issuer "Apple Worldwide Developer Relations", and Provisioning Profiles lists "Dali Clock Distribution" with App Identifier "8Z7K4K7M89.org.jwz.iDaliClock". The popup menu for "Code Signing Identity" also shows "iPhone Distribution: Jamie Zawinski" as being a sub-item of "Dali Clock Distribution (for Application Identifiers org.jwz.iDaliClock)", so it does appear to be seeing all this shit.

Yes, Keychain Access has "login" as my default chain. Yes, the private keys are there:

iPhone Distribution: Jamie Zawinski [certificate, login, valid]
    Jamie Zawinski [private key, login, RSA 2048, usage: any]
iPhone Developer: Jamie Zawinski (Y5M82TL69N) [certificate, login, valid]
    Jamie Zawinski [private key, login, RSA 2048, usage: any]

Setting the signing identity on the project as well as the target changes nothing.

Any other ideas?

Previously.