Is Codemagic going to create new distribution certificate when the current one is about to expire?

[orestesgaolin]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

Flutter (Dart)

Steps to reproduce

We received e-mail from Apple stating that

Your Distribution Certificate will no longer be valid in 30 days. To generate a new certificate, sign in and visit Certificates, Identifiers & Profiles.

From what I understand it's the Codemagic that was responsible for creating the distribution certificate on behalf of our organization, is that correct? I can't recall exactly right now, but we provided a private key CERTIFICATE_PRIVATE_KEY and Codemagic used it to create a distribution certificate (?)

Expected results

Do I understand correctly, that Codemagic is going to create a new certificate once the current one expires during the build? If not, what should be the steps to follow?

Actual results

Build id (optional)

No response

[dtrdic]

EDIT:
If you are using automatic code signing, Codemagic will take care of certificate and provisioning profile management for you, based on the Certificate private key that you provide.
If it's a private key of an existing certificate, Codemagic will automatically fetch the correct certificate from the App Store. However, if you provide a different one that does not already exist, Codemagic will create a new certificate for you.

Anyway, if using automatic code signing certificate will automatically be renewed for you when it expires.

[omar-chaabouni]

hey @dtrdic any idea what that means ?

Found 3 Signing Certificates matching specified filters: certificateType=IOS_DISTRIBUTION,DISTRIBUTION.
Did not find any Signing Certificates for given private key
Creating new Signing Certificate: certificate type: DISTRIBUTION
POST https://api.appstoreconnect.apple.com/v1/certificates returned 409: There is a problem with the request entity - You already have a current Distribution certificate or a pending certificate request.
I have automatic ios code signing enabled

[dtrdic]

hey @omar-chaabouni can you please open a different thread for your question, since this is a different issue. Lets continue the conversation in there

[omar-chaabouni]

Yes of course sorry. This is the issue link https://github.com/orgs/codemagic-ci-cd/discussions/1932 with the solution.

[belensaacastro]

Hi @dtrdic ! I manually created my build with the codemagic UI workflow and not from a CI pipeline with the codemagic.yaml file.
Do I need to create new deploy or how is going to do Codemagic to automatically renew the certificate when it expires?

Thank you!

[dtrdic]

This discussion is being closed due to no activity in the last 14 days. You can reopen the discussion at any time if needed.