Fix Apple signing

This commit is contained in:
DecDuck
2025-11-15 14:19:04 +11:00
parent 84f4210479
commit 1129c697aa
3 changed files with 87 additions and 6 deletions

View File

@ -67,13 +67,22 @@ jobs:
security default-keychain -s build.keychain
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
security set-keychain-settings -t 3600 -u build.keychain
echo "Created keychain"
curl https://droposs.org/drop.crt --output drop.pem
sudo security authorizationdb write com.apple.trust-settings.user allow
security add-trusted-cert -r trustRoot -k build.keychain -p codeSign -u -1 drop.pem
sudo security authorizationdb remove com.apple.trust-settings.user
curl https://droposs.org/drop.der --output drop.der
swiftc libs/appletrust/add-certificate.swift
./add-certificate drop.der
rm add-certificate
echo "Added certificate to keychain using swift util"
# sudo security authorizationdb write com.apple.trust-settings.user allow
# security add-trusted-cert -r trustRoot -k build.keychain -p codeSign -u -1 drop.der
# sudo security authorizationdb remove com.apple.trust-settings.user
security import certificate.p12 -k build.keychain -P "$APPLE_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
echo "Imported certificate"
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
security find-identity -v -p codesigning build.keychain