iOS-Build-Scripts/keychain-prepare.sh at master · openbakery/iOS-Build-Scripts · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
#!/bin/sh

source common.sh

CURL_CMD="curl -o"

if [ -n "$PROVISIONING_URL" ] && [ -n "$PROVISIONING" ] && [ -n "$CERTIFICATES_PASSWORD" ]
then

	if [ -z "$KEYCHAIN_PASSWORD" ]; then
		KEYCHAIN_PASSWORD="thisisalongpasswordforthekeychain"
	fi

	section_print "Get Mobile Provisioning Profile"

	mkdir -p `dirname $PROVISIONING`


	$CURL_CMD $PROVISIONING.mobileprovision ${PROVISIONING_URL}/$PROVISIONING.mobileprovision
	if [ $? -gt 0 ]; then
		fail "${PROVISIONING_URL}/$PROVISIONING.mobileprovision not found"
	fi

	$CURL_CMD $PROVISIONING.p12 ${PROVISIONING_URL}/$PROVISIONING.p12

	if [ $? -gt 0 ]; then
		fail "${PROVISIONING_URL}/$PROVISIONING.p12 not found"
	fi

	# find the uuid in the provisioning profile
	UUID=`cat $PROVISIONING.mobileprovision | awk '/\<key\>UUID\<\/key\>/,/<\string\>.*\<\/string\>/' | tail -n1 | cut -f2 -d">"|cut -f1 -d"<"`

	#echo "UUID=$UUID"

	mkdir -p ~/Library/MobileDevice/"Provisioning Profiles"
	cp $PROVISIONING.mobileprovision ~/Library/MobileDevice/"Provisioning Profiles"/$UUID.mobileprovision

	section_print "Setup Keychain"

	KEYCHAIN_NAME=~/Library/Keychains/jenkins.keychain

	security delete-keychain "$KEYCHAIN_NAME"
	sleep 1
	security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_NAME"

	security default-keychain -s "$KEYCHAIN_NAME"
	security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_NAME

	section_print "Import Certificates to Keychain"
	security -v import $PROVISIONING.p12 -k $KEYCHAIN_NAME -P $CERTIFICATES_PASSWORD -T /usr/bin/codesign

	security list-keychain
	security show-keychain-info $KEYCHAIN_NAME


else
	section_print "No Signing is available in this build!"
fi


section_print "Keychain prepared"