fastlane / fastlane

🚀 The easiest way to automate building and releasing your iOS and Android apps
https://fastlane.tools
MIT License
39.64k stars 5.71k forks source link

Unable to install development certificate private key #27448

Open borrrden opened 1 week ago

borrrden commented 1 week ago

New Issue Checklist

Issue Description

Until recently this had been working fine, but when I run the fastlane match development command now I get an error in the middle of the output. The rest of the output continues as if nothing happened and indicates success but the certificate private key fails to get installed and I cannot make builds.

The output included is incredibly mundane except for one line in the middle that says:

security: SecKeychainItemImport: MAC verification failed during PKCS12 import (wrong password?)

Command executed
fastlane match development --git_url <..> --username <..> --app_identifier <..> --git_private_key <..>
Complete output when running fastlane, including the stack trace and command used
 
    [19:34:51]: ^[[33mGet started using a Gemfile for fastlane https://docs.fastlane.tools/getting-started/ios/setup/#use-a-gemfile^[[0m
[19:34:51]: ^[[31mWARNING: fastlane requires your locale to be set to UTF-8. To learn more go to https://docs.fastlane.tools/getting-started/ios/setup/#set-up-environment-variables^[[0m
[19:34:51]: ^[[32mSuccessfully loaded '/Users//.fastlane/Matchfile' �~_~S~D^[[0m

+---------------------------------------------------------+
|      Detected Values from './.fastlane/Matchfile'       |
+--------------+------------------------------------------+
| git_url      |                                 |
| storage_mode | git                                      |
| type         | development                              |
+--------------+------------------------------------------+

+-------------------------------------------------------------------------------------+
|                              ^[[32mSummary for match 2.225.0^[[0m                              |
+----------------------------------------+--------------------------------------------+
| git_url                                |                                      |
| username                               |                                     |
| app_identifier                         | [""]                               |
| platform                               | catalyst                                   |
| git_private_key                        | ********                                   |
| type                                   | development                                |
| readonly                               | false                                      |
| generate_apple_certs                   | true                                       |
| skip_provisioning_profiles             | false                                      |
| storage_mode                           | git                                        |
| git_branch                             | master                                     |
| shallow_clone                          | false                                      |
| clone_branch_directly                  | false                                      |
| skip_google_cloud_account_confirmation | false                                      |
| s3_skip_encryption                     | false                                      |
| gitlab_host                            | https://gitlab.com                         |
| keychain_name                          | login.keychain                             |
| force                                  | false                                      |
| force_for_new_devices                  | false                                      |
| include_mac_in_profiles                | false                                      |
| include_all_certificates               | false                                      |
| force_for_new_certificates             | false                                      |
| skip_confirmation                      | false                                      |
| safe_remove_certs                      | false                                      |
| skip_docs                              | false                                      |
| derive_catalyst_app_identifier         | false                                      |
| fail_on_name_taken                     | false                                      |
| skip_certificate_matching              | false                                      |
| skip_set_partition_list                | false                                      |
| force_legacy_encryption                | false                                      |
| verbose                                | false                                      |
+----------------------------------------+--------------------------------------------+

[19:34:51]: Cloning remote git repo...
[19:34:51]: If cloning the repo takes too long, you can use the `clone_branch_directly` option in match.
[19:34:53]: Checking out branch master...
[19:34:53]: ^[[32m�~_~T~S  Successfully decrypted certificates repo^[[0m
[19:34:53]: Verifying that the certificate and profile are still valid on the Dev Portal...
[19:34:54]: Installing certificate...
[19:34:54]: ^[[31msecurity: SecKeychainItemImport: MAC verification failed during PKCS12 import (wrong password?)^[[0m

+------------------------------------------------------------------+
|                      ^[[32mInstalled Certificate^[[0m                       |
+-------------------+----------------------------------------------+
| User ID           |                                     |
| Common Name       | Apple Development:  ()        |
| Organisation Unit |                                        |
| Organisation      |                                         |
| Country           | US                                           |
| Start Datetime    | 2024-03-02 01:01:38 UTC                      |
| End Datetime      | 2025-03-02 01:01:37 UTC                      |
+-------------------+----------------------------------------------+

[19:34:55]: Installing provisioning profile...

+-----------------------------------------------------------------------------------------------------------------------------------------------+
|                                                        ^[[32mInstalled Provisioning Profile^[[0m                                                         |
+---------------------+------------------------------------------------------------+------------------------------------------------------------+
| Parameter           | Environment Variable                                       | Value                                                      |
+---------------------+------------------------------------------------------------+------------------------------------------------------------+
| App Identifier      |                                                            |                                                    |
| Type                |                                                            | development                                                |
| Platform            |                                                            | catalyst                                                   |
| Profile UUID        | sigh__development_catalyst                         | 925c4efc-625d-4843-8fef-b79def274789                       |
| Profile Name        | sigh__development_catalyst                         | match Development                                  |
|                     | _profile-name                                              | catalyst                                                   |
| Profile Path        | sigh__development_catalyst                         | /Users//Library/MobileDevice/Provisioning        |
|                     | _profile-path                                              | Profiles/925c4efc-625d-4843-8fef-b79def274789.provisionpr  |
|                     |                                                            | ofile                                                      |
| Development Team ID | sigh__development_catalyst                         |                                                      |
|                     | _team-id                                                   |                                                            |
| Certificate Name    | sigh__development_catalyst                         | Apple Development:  ()                      |
|                     | _certificate-name                                          |                                                            |
+---------------------+------------------------------------------------------------+------------------------------------------------------------+
[19:34:55]: ^[[32m^[[32mAll required keys, certificates and provisioning profiles are installed �~_~Y~L^[[0m
[19:34:55]: ^[[31mWARNING: fastlane requires your locale to be set to UTF-8. To learn more go to https://docs.fastlane.tools/getting-started/ios/setup/#set-up-environment-variables^[[0m
 

Environment

🚫 fastlane environment 🚫 ### Stack | Key | Value | | --------------------------- | ---------------------------------------------------------- | | OS | 14.4 | | Ruby | 3.3.5 | | Bundler? | false | | Git | git version 2.39.3 (Apple Git-145) | | Installation Source | /opt/homebrew/Cellar/fastlane/2.225.0/libexec/bin/fastlane | | Host | macOS 14.4 (23E214) | | Ruby Lib Dir | /opt/homebrew/Cellar/ruby/3.3.5/lib | | OpenSSL Version | OpenSSL 3.3.1 4 Jun 2024 | | Is contained | false | | Is homebrew | true | | Is installed via Fabric.app | false | | Xcode Path | /Applications/Xcode-15.2.0.app/Contents/Developer/ | | Xcode Version | 15.2 | | Swift Version | 5.9.2 | ### System Locale | Error | | --------------------------- | | No Locale with UTF8 found 🚫 | ### fastlane files: **No Fastfile found** **No Appfile found** ### fastlane gems | Gem | Version | Update-Status | | -------- | ------- | ------------- | | fastlane | 2.225.0 | ✅ Up-To-Date | ### Loaded fastlane plugins: **No plugins Loaded**
Loaded gems | Gem | Version | | ------------------------------- | ------------ | | error_highlight | 0.6.0 | | did_you_mean | 1.6.3 | | syntax_suggest | 2.0.0 | | public_suffix | 6.0.1 | | addressable | 2.8.7 | | artifactory | 3.0.17 | | jmespath | 1.6.2 | | aws-partitions | 1.992.0 | | aws-eventstream | 1.3.0 | | aws-sigv4 | 1.10.0 | | aws-sdk-core | 3.210.0 | | aws-sdk-kms | 1.95.0 | | aws-sdk-s3 | 1.169.0 | | babosa | 1.0.4 | | bundler | 2.5.18 | | rexml | 3.3.8 | | nkf | 0.1.3 | | base64 | 0.2.0 | | CFPropertyList | 3.0.7 | | colored | 1.2 | | highline | 2.0.3 | | commander | 4.6.0 | | dotenv | 2.8.1 | | emoji_regex | 3.2.3 | | excon | 0.112.0 | | faraday-em_http | 1.0.0 | | faraday-em_synchrony | 1.0.0 | | faraday-excon | 1.1.0 | | faraday-httpclient | 1.0.1 | | multipart-post | 2.4.1 | | faraday-multipart | 1.0.4 | | faraday-net_http | 1.0.2 | | faraday-net_http_persistent | 1.2.0 | | faraday-patron | 1.0.0 | | faraday-rack | 1.0.0 | | faraday-retry | 1.0.3 | | ruby2_keywords | 0.0.5 | | faraday | 1.10.4 | | faraday_middleware | 1.2.1 | | domain_name | 0.6.20240107 | | http-cookie | 1.0.7 | | faraday-cookie_jar | 0.0.7 | | fastimage | 2.3.1 | | sysrandom | 1.0.5 | | fastlane-sirp | 1.0.0 | | gh_inspector | 1.1.3 | | uber | 0.1.0 | | declarative | 0.0.20 | | trailblazer-option | 0.1.2 | | representable | 3.2.0 | | retriable | 3.1.2 | | mini_mime | 1.1.5 | | jwt | 2.9.3 | | multi_json | 1.15.0 | | os | 1.1.4 | | signet | 0.19.0 | | googleauth | 1.8.1 | | httpclient | 2.8.3 | | google-apis-core | 0.11.3 | | google-apis-androidpublisher_v3 | 0.54.0 | | google-apis-playcustomapp_v1 | 0.13.0 | | google-cloud-env | 1.6.0 | | google-cloud-errors | 1.4.0 | | google-cloud-core | 1.7.1 | | google-apis-iamcredentials_v1 | 0.17.0 | | google-apis-storage_v1 | 0.31.0 | | rake | 13.2.1 | | digest-crc | 0.6.5 | | google-cloud-storage | 1.47.0 | | json | 2.7.1 | | mini_magick | 4.13.2 | | naturally | 2.2.1 | | optparse | 0.4.0 | | plist | 3.7.1 | | rubyzip | 2.3.2 | | security | 0.1.5 | | simctl | 1.6.10 | | terminal-notifier | 2.0.0 | | unicode-display_width | 2.6.0 | | terminal-table | 3.0.2 | | tty-screen | 0.8.2 | | tty-cursor | 0.7.1 | | tty-spinner | 0.9.3 | | word_wrap | 1.0.0 | | atomos | 0.1.3 | | claide | 1.1.0 | | colored2 | 3.1.2 | | nanaimo | 0.3.0 | | xcodeproj | 1.25.1 | | rouge | 2.0.7 | | xcpretty | 0.3.0 | | xcpretty-travis-formatter | 1.0.1 | | set | 1.1.0 | | forwardable | 1.3.3 | | logger | 1.6.0 | | pathname | 0.3.0 | | shellwords | 0.2.0 | | cgi | 0.4.1 | | date | 3.3.4 | | timeout | 0.4.1 | | stringio | 3.1.1 | | securerandom | 0.3.1 | | uri | 0.13.1 | | ipaddr | 1.2.6 | | openssl | 3.2.0 | | digest | 3.1.1 | | io-nonblock | 0.3.0 | | zlib | 3.1.1 | | resolv | 0.3.0 | | io-wait | 0.3.1 | | time | 0.3.0 | | open-uri | 0.4.1 | | mutex_m | 0.2.0 | | net-http | 0.4.1 | | net-protocol | 0.2.2 | | ostruct | 0.6.0 | | english | 0.8.0 | | erb | 4.0.3 | | strscan | 3.0.9 | | abbrev | 0.1.2 | | io-console | 0.7.1 | | tempfile | 0.2.1 | | delegate | 0.3.1 | | fileutils | 1.7.2 | | tmpdir | 0.2.0 | | singleton | 0.2.0 | | open3 | 0.2.1 | | prettyprint | 0.2.0 | | pp | 0.5.0 | | find | 0.2.0 | | yaml | 0.3.0 | | psych | 5.1.2 |
*generated on:* **2024-11-01**
michelle653burkes commented 4 days ago

Hello! It sounds like you're encountering an issue with the fastlane match development command, specifically with the certificate private key installation. The error message "MAC verification failed prepaidgiftbalance activation during PKCS12 import (wrong password?)" suggests that there might be a problem with the password used for the PKCS12 file.