@@ -224,7 +224,7 @@ jobs:
224224 PP_PATH=$RUNNER_TEMP/embedded.provisionprofile
225225 INTERMEDIATE_CERTIFICATE_PATH=$RUNNER_TEMP/AppleWWDRCA.cer
226226 INTERMEDIATE_PEM_PATH=$RUNNER_TEMP/AppleWWDRCA.pem
227- KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
227+ KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain
228228
229229 # import certificate and provisioning profile from secrets
230230 echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode > "$CERTIFICATE_PATH"
@@ -236,11 +236,13 @@ jobs:
236236 echo "create temporary keychain"
237237 security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
238238 security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
239+ security default-keychain -s $KEYCHAIN_PATH
239240 security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
240241
241242 echo "import certificate to keychain"
242- security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
243- security import "$CERTIFICATE_PATH" -P "$P12_PASSWORD" -A -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
243+ # security add-trusted-cert -d -r unspecified -k "$KEYCHAIN_PATH" "$INTERMEDIATE_PEM_PATH"
244+ security import "$CERTIFICATE_PATH" -k "$KEYCHAIN_PATH" -P "$P12_PASSWORD" -T /usr/bin/codesign
245+ security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
244246 security list-keychains -d user -s $(security list-keychains -d user | sed -e s/\"//g) "$KEYCHAIN_PATH"
245247
246248 # apply provisioning profile
0 commit comments