From b8676027db4a27da1fd781b0ea2c587cf5425c13 Mon Sep 17 00:00:00 2001 From: James Magahern Date: Thu, 25 Jun 2026 21:12:53 -0700 Subject: [PATCH] ios: trust Apple root in CI signing keychain --- .gitea/workflows/testflight-release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.gitea/workflows/testflight-release.yml b/.gitea/workflows/testflight-release.yml index 04140b7..19a42a3 100644 --- a/.gitea/workflows/testflight-release.yml +++ b/.gitea/workflows/testflight-release.yml @@ -89,12 +89,14 @@ jobs: printf '%s' "${APPSTORE_CERTIFICATES_FILE_BASE64}" | base64 --decode > ios/build/secrets/appstore-signing.p12 printf '%s' "${APPSTORE_PROVISIONING_PROFILE_BASE64}" | base64 --decode > "${HOME}/Library/MobileDevice/Provisioning Profiles/Sybil_AppStore_CI.mobileprovision" + curl -fsSL https://www.apple.com/appleca/AppleIncRootCertificate.cer -o ios/build/secrets/AppleIncRootCertificate.cer curl -fsSL https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer -o ios/build/secrets/AppleWWDRCAG3.cer security create-keychain -p "${keychain_password}" "${keychain_path}" security set-keychain-settings -lut 21600 "${keychain_path}" security unlock-keychain -p "${keychain_password}" "${keychain_path}" security list-keychains -d user -s "${keychain_path}" $(security list-keychains -d user | sed 's/[ "]//g') + security add-trusted-cert -r trustRoot -k "${keychain_path}" ios/build/secrets/AppleIncRootCertificate.cer security import ios/build/secrets/AppleWWDRCAG3.cer \ -k "${keychain_path}" \ -T /usr/bin/codesign \