test ios archive signing

Author: Alex0x47

.github/workflows/ios-action.yml

@@ -76,7 +76,6 @@ jobs:
           mkdir -p "$HOME/Library/MobileDevice/Provisioning Profiles"
           cp "$PROFILE" "$HOME/Library/MobileDevice/Provisioning Profiles/"
 
-
       - name: Show build settings
         run: |
           cd ios/App
@@ -85,39 +84,61 @@ jobs:
             -scheme "App" \
             -configuration "Release Production" | egrep "CODE_SIGN|PROVISION|PRODUCT_BUNDLE_IDENTIFIER|DEVELOPMENT_TEAM"
 
-      - name: Build archive
-        env:
-          TEAM_ID: ${{ secrets.APPSTORE_TEAM_ID }}
+      - name: Show code signing identities
         run: |
-          set -euo pipefail
-          cd ios/App
-          xcodebuild \
-            -workspace "App.xcworkspace" \
-            -scheme "App" \
-            -configuration "Release Production" \
-            -archivePath "$GITHUB_WORKSPACE/App.xcarchive" \
-            -destination "generic/platform=iOS" \
-            DEVELOPMENT_TEAM="$TEAM_ID" \
-            CODE_SIGN_STYLE=Manual \
-            CODE_SIGNING_ALLOWED=NO \
-            CODE_SIGNING_REQUIRED=NO \
-            CODE_SIGN_IDENTITY="" \
-            PROVISIONING_PROFILE_SPECIFIER="" \
-            PROVISIONING_PROFILE="" \
-            clean archive
-
-      - name: Export IPA
-        env:
-          EXPORT_PLIST_B64: ${{ secrets.IOS_EXPORT_PRODUCTION }}
+          security find-identity -v -p codesigning
+
+      - name: Inspect provisioning profile
         run: |
-          set -euo pipefail
-          EXPORT_PLIST=$RUNNER_TEMP/ExportOptions.plist
-          echo -n "$EXPORT_PLIST_B64" | base64 --decode > "$EXPORT_PLIST"
-          cd ios/App
-          xcodebuild -exportArchive \
-            -archivePath "$GITHUB_WORKSPACE/App.xcarchive" \
-            -exportOptionsPlist "$EXPORT_PLIST" \
-            -exportPath "$RUNNER_TEMP/export"
+          PROFILE=$(ls "$HOME/Library/MobileDevice/Provisioning Profiles"/*.mobileprovision | head -n1)
+          security cms -D -i "$PROFILE" > $RUNNER_TEMP/profile.plist
+          echo "Profile Name: $(/usr/libexec/PlistBuddy -c 'Print Name' $RUNNER_TEMP/profile.plist)"
+          echo "Bundle ID:    $(/usr/libexec/PlistBuddy -c 'Print Entitlements:application-identifier' $RUNNER_TEMP/profile.plist)"
+          # Print SHA-1 fingerprints of DeveloperCertificates embedded in the profile
+          python3 - <<'PY'
+          import plistlib, base64, subprocess, os
+          p=plistlib.load(open(os.environ['RUNNER_TEMP']+'/profile.plist','rb'))
+          for i, der_b64 in enumerate(p.get('DeveloperCertificates', [])):
+              der = base64.b64decode(der_b64)
+              path = f"{os.environ['RUNNER_TEMP']}/cert{i}.cer"
+              open(path,'wb').write(der)
+              out = subprocess.check_output(['openssl','x509','-inform','DER','-in',path,'-noout','-subject','-serial','-fingerprint','-sha1']).decode()
+              print(f"Profile cert[{i}]:\n{out}")
+          PY
+
+      # - name: Build archive
+      #   env:
+      #     TEAM_ID: ${{ secrets.APPSTORE_TEAM_ID }}
+      #   run: |
+      #     set -euo pipefail
+      #     cd ios/App
+      #     xcodebuild \
+      #       -workspace "App.xcworkspace" \
+      #       -scheme "App" \
+      #       -configuration "Release Production" \
+      #       -archivePath "$GITHUB_WORKSPACE/App.xcarchive" \
+      #       -destination "generic/platform=iOS" \
+      #       DEVELOPMENT_TEAM="$TEAM_ID" \
+      #       CODE_SIGN_STYLE=Manual \
+      #       CODE_SIGNING_ALLOWED=NO \
+      #       CODE_SIGNING_REQUIRED=NO \
+      #       CODE_SIGN_IDENTITY="" \
+      #       PROVISIONING_PROFILE_SPECIFIER="" \
+      #       PROVISIONING_PROFILE="" \
+      #       clean archive
+
+      # - name: Export IPA
+      #   env:
+      #     EXPORT_PLIST_B64: ${{ secrets.IOS_EXPORT_PRODUCTION }}
+      #   run: |
+      #     set -euo pipefail
+      #     EXPORT_PLIST=$RUNNER_TEMP/ExportOptions.plist
+      #     echo -n "$EXPORT_PLIST_B64" | base64 --decode > "$EXPORT_PLIST"
+      #     cd ios/App
+      #     xcodebuild -exportArchive \
+      #       -archivePath "$GITHUB_WORKSPACE/App.xcarchive" \
+      #       -exportOptionsPlist "$EXPORT_PLIST" \
+      #       -exportPath "$RUNNER_TEMP/export"
 
       # - name: Save App Store Connect API key (.p8)
       #   env: