ios - Jenkins - Xcode build works codesign fails -


below build script (not using xcodebuild plugin).

  1. build step works
  2. have created separate keychain required certs , private keys, , visible in keychain access
  3. keychain commands don't fail in script
  4. security list-keychains shows these valid keychains

it's acting unlock command doesn't succeed. when try run codesign command line via

codesign -f -s "iphone developer: mycert" -v sample.app/ --keychain /users/shared/jenkins/library/keychains/jenkinsci.keychain

i 

cssm_signdata returned: 000186ad sample.app/: unknown error -2070=fffffffffffff7ea

although i'm not sure i'm emulating command line since can @ best 

sudo -u jenkins bash  xcodebuild only_active_arch="no" code_sign_identity="" code_signing_required="no" -scheme "myschemename" configuration_build_dir="`pwd`" security list-keychains -s /users/shared/jenkins/library/keychains/jenkinsci.keychain + security default-keychain -d user -s /users/shared/jenkins/library/keychains/jenkinsci.keychain + security unlock-keychain -p jenkins /users/shared/jenkins/library/keychains/jenkinsci.keychain + security list-keychains     "/users/shared/jenkins/library/keychains/jenkinsci.keychain"     "/library/keychains/system.keychain" + security default-keychain     "/users/shared/jenkins/library/keychains/jenkinsci.keychain" + codesign -f -s '$identity_goes_here.' -v sample.app/ sample.app/: user interaction not allowed.

any appreciated.

we don't use jenkins i've seen in our build automation before. here's how solved it:

1) create build keychain. contain private key/certificate used codesigning:

security create-keychain -p [keychain_password] mykeychain.keychain

the keychain_password you. you'll use later unlock keychain during build.

2) import private key (*.p12) codesign identity:

security import myprivatekey.p12 -t agg -k mykeychain.keychain -p [p12_password] -a

the key here "-a" flag. allow access keychain without warning. why you're seeing "user interaction not allowed" error. if attempting build via xcode ui, point prompt "allow access" keychain.

3) you're saving keychain (e.g.: checking in source control), make sure it's writeable , executable build user.

when you're ready build, add following prior running xcodebuild:

# switch keychain security list-keychains -s "/path/to/mykeyhain.keychain" security default-keychain -s "/path/to/mykeychain.keychain" security unlock-keychain -p "[keychain_password]" "/path/to/mykeychain.keychain"

if you're running locally, may want add @ end of build script switches login keychain (~/library/keychains/login.keychain), e.g.:

# switch login keychain security list-keychains -s "~/library/keychains/login.keychain" security default-keychain -s "~/library/keychains/login.keychain"

give try. create separate keychain each identity use (our own plus builds on behalf of customers). in our company's case, have both appstore , enterprise account. can result in naming conflicts while codesigning (e.g.: both accounts resolve "iphone distribution: acme corporation"). keeping these identities in separate keychains avoid conflict.


Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

node.js - Getting the socket id,user id pair of a logged in user(s) -

i have web application done using node js , in it,i have authentication system requires users log in before can access pages. have 2 pages,the homepage , updates page. from read docs,a new socket id issued when user opens tab in browser. me being admin,i know socket id of logged in user , more so,the socket id,logged in user id pair logged in users. what method can use socket id,logged in user id pair make sure broadcast realtime info users online?.
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua
Read more