try importing cer as pem..

NateIsStalling · NateIsStalling · commit 0d6bd048c2df · 2025-03-18T20:41:34.000-04:00
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
@@ -138,15 +138,18 @@ jobs:
           CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
           PP_PATH=$RUNNER_TEMP/embedded.provisionprofile
           INTERMEDIATE_CERTIFICATE_PATH=$RUNNER_TEMP/AppleWWDRCA.cer
+          INTERMEDIATE_PEM_PATH=$RUNNER_TEMP/AppleWWDRCA.pem
           KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
           
           # import certificate and provisioning profile from secrets
           echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode --output "$CERTIFICATE_PATH"
           echo -n "$BUILD_PROVISION_PROFILE_BASE64" | base64 --decode --output "$PP_PATH"
           echo -n "INTERMEDIATE_CERTIFICATE_BASE64" | base64 --decode --output "$INTERMEDIATE_CERTIFICATE_PATH"
           
+          openssl x509 -inform der -in "$INTERMEDIATE_CERTIFICATE_PATH" -out "$INTERMEDIATE_PEM_PATH" || cp "$INTERMEDIATE_CERTIFICATE_PATH" "$INTERMEDIATE_PEM_PATH"
+          
           echo "import certificate to keychain"
-          security import "$INTERMEDIATE_CERTIFICATE_PATH" -k "$KEYCHAIN_PATH" -t cert
+          security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
           security import "$CERTIFICATE_PATH" -P "$P12_PASSWORD" -A -t cert -f pkcs12
           security list-keychains -d user -s $(security list-keychains -d user | sed -e s/\"//g) "$KEYCHAIN_PATH"
           
@@ -214,16 +217,18 @@ jobs:
           CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
           PP_PATH=$RUNNER_TEMP/embedded.provisionprofile
           INTERMEDIATE_CERTIFICATE_PATH=$RUNNER_TEMP/AppleWWDRCA.cer
+          INTERMEDIATE_PEM_PATH=$RUNNER_TEMP/AppleWWDRCA.pem
           KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
           
           # import certificate and provisioning profile from secrets
           echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode > "$CERTIFICATE_PATH"
           echo -n "$BUILD_PROVISION_PROFILE_BASE64" | base64 --decode > "$PP_PATH"
           echo -n "INTERMEDIATE_CERTIFICATE_BASE64" | base64 --decode > "$INTERMEDIATE_CERTIFICATE_PATH"
           
+          openssl x509 -inform der -in "$INTERMEDIATE_CERTIFICATE_PATH" -out "$INTERMEDIATE_PEM_PATH" || cp "$INTERMEDIATE_CERTIFICATE_PATH" "$INTERMEDIATE_PEM_PATH"
           
           echo "import certificate to keychain"
-          security import "$INTERMEDIATE_CERTIFICATE_PATH" -k "$KEYCHAIN_PATH" -t cert
+          security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
           security import "$CERTIFICATE_PATH" -P "$P12_PASSWORD" -A -t cert -f pkcs12
           security list-keychains -d user -s $(security list-keychains -d user | sed -e s/\"//g) "$KEYCHAIN_PATH"
           
