diff --git a/signAndDeploy.sh b/signAndDeploy.sh index 667a91467f257a005487bf24de080ef7ff9a9fef..c45b4ca7d9a5d22b6d153dde2f425d58bddd88be 100755 --- a/signAndDeploy.sh +++ b/signAndDeploy.sh @@ -2,24 +2,23 @@ echo "" cd build-local -macdeployqt ./Ring.app echo "cloning certificates" git clone $CERTIFICATES_REPOSITORY echo "prepare keychain" -security create-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_NAME -security unlock-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_NAME -security list-keychains -s $KEYCHAIN_NAME -security set-key-partition-list -S apple-tool:,apple:,productbuild: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_NAME +security create-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_NAME > /dev/null 2>&1 +security unlock-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_NAME > /dev/null 2>&1 +security list-keychains -s $KEYCHAIN_NAME > /dev/null 2>&1 +security set-key-partition-list -S apple-tool:,apple:,productbuild: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_NAME > /dev/null 2>&1 echo "import certificates" security import certificates/certificates/distribution/Certificates.p12 -k $KEYCHAIN_PATH -P $CERTIFICATES_PASSWORD -T /usr/bin/codesign -T /usr/bin/productbuild DELIVER_PASSWORD=$APPLE_PASSWORD fastlane sigh --app_identifier $BUNDLE_ID --username $APPLE_ACCOUNT --readonly true --platform macos --team_id $TEAM_ID -security set-key-partition-list -S apple-tool:,apple:,productbuild: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_NAME +security set-key-partition-list -S apple-tool:,apple:,productbuild: -s -k $KEYCHAIN_PASSWORD $KEYCHAIN_NAME > /dev/null 2>&1 echo "start signing" -codesign --deep --force --verbose --sign "${APP_CERTIFICATE}" --entitlements ../data/Ring.entitlements Ring.app -codesign --verify --verbose Ring.app +macdeployqt ./Ring.app -codesign="${APP_CERTIFICATE}" +codesign --force --sign "${APP_CERTIFICATE}" --entitlements ../data/Ring.entitlements Ring.app +codesign --verify Ring.app echo "create .pkg" productbuild --component Ring.app/ /Applications --sign "${INSTALLER_CERTIFICATE}" --product Ring.app/Contents/Info.plist Ring.pkg -pkgutil --check-signature Ring.pkg /Applications/Xcode.app/Contents/Applications/Application\ Loader.app/Contents/Frameworks/ITunesSoftwareService.framework/Support/altool --validate-app --type osx -f Ring.pkg -u $APPLE_ACCOUNT --password $APPLE_PASSWORD echo "start deploying" /Applications/Xcode.app/Contents/Applications/Application\ Loader.app/Contents/Frameworks/ITunesSoftwareService.framework/Support/altool --upload-app --type osx -f Ring.pkg -u $APPLE_ACCOUNT --password $APPLE_PASSWORD