retrying intermediate cert

NateIsStalling · NateIsStalling · commit 6698d0fcc782 · 2025-03-19T00:18:43.000-04:00
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
@@ -149,18 +149,17 @@ jobs:
           
           openssl x509 -inform der -in "$INTERMEDIATE_CERTIFICATE_PATH" -out "$INTERMEDIATE_PEM_PATH" || cp "$INTERMEDIATE_CERTIFICATE_PATH" "$INTERMEDIATE_PEM_PATH"
           
-          #echo "create temporary keychain"
-          #security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
-          #security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
-          #security default-keychain -s $KEYCHAIN_PATH
-          #security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          echo "create temporary keychain"
+          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security default-keychain -s $KEYCHAIN_PATH
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
           
           echo "import certificate to keychain"
-          # security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
-          security import "$CERTIFICATE_PATH" -P "$P12_PASSWORD" -A -t cert -f pkcs12 
-          #-k "$KEYCHAIN_PATH"
-          # security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" -D "${BUILD_CERTIFICATE_COMMON_NAME}" $KEYCHAIN_PATH
-          # security list-keychain -d user -s $KEYCHAIN_PATH
+          sudo security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
+          security import "$CERTIFICATE_PATH" -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+          security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" -D "${BUILD_CERTIFICATE_COMMON_NAME}" $KEYCHAIN_PATH
+          security list-keychain -d user -s $KEYCHAIN_PATH
   
           echo "Default Keychain:"
           security find-identity -p codesigning | grep -o ".*valid identities found"
@@ -252,10 +251,10 @@ jobs:
           
           security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
           security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
-          #security default-keychain -s $KEYCHAIN_PATH
+          security default-keychain -s $KEYCHAIN_PATH
           
           echo "import certificate to keychain"
-          # security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
+          sudo security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
           security import "$CERTIFICATE_PATH" -k "$KEYCHAIN_PATH" -P "$P12_PASSWORD" -A -T /usr/bin/codesign -T "/usr/bin/productsign"
           # security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
           
