diff --git a/Build-tf b/Build-tf index e317d193..0bf57826 100644 --- a/Build-tf +++ b/Build-tf @@ -43,31 +43,25 @@ rm -rf "${RESULT_BUNDLE_PATH}" "${DERIVED_DATA_PATH}" mkdir -p "${ARTIFACT_PATH}" function resign_frameworks() { - # ⬇️ Раскодировать p12 из base64 и сохранить во временный файл - P12_TMP_PATH="certs/distribution.p12" - echo "$CERTIFICATES_FILE_BASE64" | base64 --decode -o "$P12_TMP_PATH" - - # 🛡️ Импортировать сертификат - security import "$P12_TMP_PATH" -k login.keychain -P "$CERTIFICATES_PASSWORD" -T /usr/bin/codesign - security set-key-partition-list -S apple-tool:,apple: -s -k "$CERTIFICATES_PASSWORD" login.keychain - - IDENTITY="Apple Distribution: ITVIO, OOO (VL68C36HYS)" P12_TMP_PATH="certs/distribution.p12" - # 🛡️ Ensure signing identity is available + echo "📦 Preparing certificate..." + mkdir -p certs + echo "$CERTIFICATES_FILE_BASE64" | base64 --decode > "$P12_TMP_PATH" + + echo "🔑 Importing .p12 certificate..." + security import "$P12_TMP_PATH" -k login.keychain -P "$CERTIFICATES_PASSWORD" -T /usr/bin/codesign || { + echo "❌ Failed to import .p12" + exit 1 + } + + security set-key-partition-list -S apple-tool:,apple: -s -k "$CERTIFICATES_PASSWORD" login.keychain + + # 🧾 Проверка, что identity доступен if ! security find-identity -v -p codesigning | grep -q "${IDENTITY}"; then - echo "📦 Extracting certificate from GitHub Secrets..." - mkdir -p certs - echo "$CERTIFICATES_FILE_BASE64" | base64 --decode -o "$P12_TMP_PATH" - - echo "🔑 Importing .p12 certificate..." - security import "$P12_TMP_PATH" -k login.keychain -P "$CERTIFICATES_PASSWORD" -T /usr/bin/codesign || { - echo "❌ Failed to import .p12" - exit 1 - } - - security set-key-partition-list -S apple-tool:,apple: -s -k "$CERTIFICATES_PASSWORD" login.keychain + echo "❌ Signing identity '${IDENTITY}' not found in keychain." + exit 1 fi local app_path="${ARCHIVE_PATH}/Products/Applications/Runner.app"