phamha98 / hi

note
Other
2 stars 0 forks source link

Certificate Signing Requests Explained #42

Open phamha98 opened 2 months ago

phamha98 commented 2 months ago

https://developer.apple.com/forums/thread/699268

IMPORTANT This post covers the ‘classic’ certificate creation process described in Developer Account Help > Create certificates > Create a certificate signing request. Things work differently if you use Xcode to create your certificates, and very differently if you use cloud-managed certificates.

Here’s a basic outline of the CSR process:

You run Keychain Access and choose Certificate Assistant > Request a Certificate from a Certificate Authority.

You run through the workflow as described in Developer Account Help > Create certificates > Create a certificate signing request.

This does two things:

It generates a public / private key pair in your keychain. To see these, run Keychain Access and select “login” on the left and Keys at the top. Look for keys whose names match the Common Name you entered in step 2.

It prompts you to save a .certSigningRequest file (CSR). This contains a copy of the public key.

You upload the CSR file to the developer web site.

The developer web site issues you a certificate. In human terms this certificate says “Apple certifies that the subject of this certificate holds the private key that matches the public key embedded in this certificate.”

Note The developer web site sets the subject information in the certificate based on your developer account. It ignores the subject information in the CSR. So, you can enter any information you want in step 2. This is a good way to distinguish between different keys in your keychain. For example, you might set the Common Name field in step 2 to include a unique identifier that allows you to easily identify the public / private key pair generated in step 3.

You download the certificate and add it to your keychain.