Keychain Access error when creating new system certificate
I got the same error, so I went through the process but created the certificate in the login keychain. Once this is done you can drag the certificate into the System keychain through the UI.
You will need to unlock your System keychain first if it is showing as a locked padlock: just right-click and select 'Unlock keychain "System"'.
You have to enter your password several times but eventually it works, and the corresponding codesign command works:
codesign -fs your-cert-name $(which gdb)