Skip to content

Commit 79ef5ba

Browse files
committed
try to add ios cert to keychain
1 parent bcd6b04 commit 79ef5ba

File tree

1 file changed

+34
-12
lines changed

1 file changed

+34
-12
lines changed

.github/workflows/deploy-tauri.yml

Lines changed: 34 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -170,20 +170,40 @@ jobs:
170170
KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
171171
run: |
172172
echo $APPLE_CERTIFICATE | base64 --decode > certificate.p12
173-
security create-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
174-
security default-keychain -s build.keychain
175-
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
176-
security import certificate.p12 -k build.keychain -P "$APPLE_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
177-
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" build.keychain
178-
security find-identity -v -p codesigning build.keychain
179-
180-
- name: Verify Certificate
173+
security create-keychain -p "$KEYCHAIN_PASSWORD" desktop.keychain
174+
security default-keychain -s desktop.keychain
175+
security unlock-keychain -p "$KEYCHAIN_PASSWORD" desktop.keychain
176+
security import certificate.p12 -k desktop.keychain -P "$APPLE_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
177+
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" desktop.keychain
178+
security find-identity -v -p codesigning desktop.keychain
179+
180+
- name: Verify Apple Developer Certificate
181181
if: matrix.platform == 'macos-latest'
182182
run: |
183183
set -x
184-
CERT_INFO=$(security find-identity -v -p codesigning build.keychain | grep "Developer ID Application")
185-
CERT_ID=$(echo "$CERT_INFO" | awk -F'"' '{print $2}')
186-
echo "CERT_ID=$CERT_ID" >> $GITHUB_ENV
184+
DESKTOP_CERT_INFO=$(security find-identity -v -p codesigning desktop.keychain | grep "Developer ID Application")
185+
DESKTOP_CERT_ID=$(echo "$DESKTOP_CERT_INFO" | awk -F'"' '{print $2}')
186+
echo "DESKTOP_CERT_ID=$DESKTOP_CERT_ID" >> $GITHUB_ENV
187+
echo "Certificate imported."
188+
189+
- name: Import Apple iOS Certificate
190+
if: matrix.ios
191+
run: |
192+
echo $IOS_CERTIFICATE | base64 --decode > certificate.p12
193+
security create-keychain -p "$KEYCHAIN_PASSWORD" mobile.keychain
194+
security default-keychain -s mobile.keychain
195+
security unlock-keychain -p "$KEYCHAIN_PASSWORD" mobile.keychain
196+
security import certificate.p12 -k mobile.keychain -P "$IOS_CERTIFICATE_PASSWORD" -T /usr/bin/codesign
197+
security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" mobile.keychain
198+
security find-identity -v -p codesigning mobile.keychain
199+
200+
- name: Verify Apple iOS Certificate
201+
if: matrix.ios
202+
run: |
203+
set -x
204+
MOBILE_CERT_INFO=$(security find-identity -v -p codesigning mobile.keychain | grep "Developer ID Application")
205+
MOBILE_CERT_ID=$(echo "$MOBILE_CERT_INFO" | awk -F'"' '{print $2}')
206+
echo "MOBILE_CERT_ID=$MOBILE_CERT_ID" >> $GITHUB_ENV
187207
echo "Certificate imported."
188208
189209
- name: Tauri info
@@ -192,6 +212,8 @@ jobs:
192212
193213
- name: Build iOS app
194214
if: matrix.ios
215+
env:
216+
APPLE_SIGNING_IDENTITY: ${{ env.MOBILE_CERT_ID }}
195217
run: |
196218
pnpm tauri ios build --verbose
197219
@@ -210,7 +232,7 @@ jobs:
210232
# APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
211233
# APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
212234
# APPLE_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
213-
# APPLE_SIGNING_IDENTITY: ${{ env.CERT_ID }}
235+
# APPLE_SIGNING_IDENTITY: ${{ env.DESKTOP_CERT_ID }}
214236
# with:
215237
# tagName: app-v__VERSION__ # the action automatically replaces \_\_VERSION\_\_ with the app version.
216238
# releaseName: App v__VERSION__

0 commit comments

Comments
 (0)